💼 CP-9 INFORMATION SYSTEM BACKUP

• ID: /frameworks/nist-sp-800-53-r4/cp/09

Description

The organization: CP-9a. Conducts backups of user-level information contained in the information system [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives]; CP-9b. Conducts backups of system-level information contained in the information system [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives]; CP-9c. Conducts backups of information system documentation including security-related documentation [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives]; and CP-9d. Protects the confidentiality, integrity, and availability of backup information at storage locations.

Similar

• Internal
  • ID: dec-c-57dbd0fd

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 NIST CSF v1.1 → 💼 PR.IP-4: Backups of information are conducted, maintained, and tested		4	8		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CP-9 (1) TESTING FOR RELIABILITY _ INTEGRITY					no data
💼 CP-9 (2) TEST RESTORATION USING SAMPLING					no data
💼 CP-9 (3) SEPARATE STORAGE FOR CRITICAL INFORMATION					no data
💼 CP-9 (4) PROTECTION FROM UNAUTHORIZED MODIFICATION					no data
💼 CP-9 (5) TRANSFER TO ALTERNATE STORAGE SITE					no data
💼 CP-9 (6) REDUNDANT SECONDARY SYSTEM					no data
💼 CP-9 (7) DUAL AUTHORIZATION					no data

Policies (1)

Policy	Logic Count	Flags	Compliance
🛡️ Google Cloud SQL Instance Automated Backups are not configured🟢	1	🟢 x6	no data