Backup of SharePoint system level files for critical systems must be performed when identified as required by the owning organization.


Overview

Finding ID Version Rule ID IA Controls Severity
V-28177 SHPT-00-000495 SV-36698r1_rule Medium
Description
Information system backup is a critical step in maintaining data assurance and availability. System-level information includes: system-state information, operating system and application software, and licenses.
STIG Date
MS SharePoint 2010 Security Technical Implementation Guide 2018-04-02

Details

Check Text ( C-37001r1_chk )
1. Verify the SharePoint farm servers, particularly those designated as critical information systems, are backed up periodically on a schedule identified by the DAA or designated representative.
2. Mark as a finding if backup is not performed or is not performed in compliance with required frequency.
Fix Text (F-32265r1_fix)
Backup SharePoint farm servers, particularly those designated as critical information systems periodically on a schedule identified by the DAA or designated representative.