Details
A system backup will usually include sensitive information such as user accounts that could be used in an attack. As a valuable system resource, the system backup must be protected and stored in a physically secure location.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Ensure system-level information backups are stored in a secure location and protected from destruction.
Supportive Information
The following resource is also helpful.
- https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_2012_and_2012_R2_MS_V3R3_STIG.zip
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.
References
- 800-53|CM-6b.
- CAT|III
- CCI|CCI-000366
- Rule-ID|SV-225253r569185_rule
- STIG-ID|WN12-00-000016
- STIG-Legacy|SV-52130
- STIG-Legacy|V-40172
- Vuln-ID|V-225253