Overview
Back-up copies of the operating system and other critical software are stored in a fire rated container or otherwise not collocated with the operational software.
Threat
Operating systems and software are potentially vulnerable to corruption by malicious code or destruction, or through natural disaster or inadvertent operator or administrator error. Hardcopy SW should be available and maintained offsite in a protected environment with secure access.
Guidance
1. Back-up copies of the operating system and other critical software shall be stored in a fire rated container or otherwise not collocated with the operational software.
2. Refer to CODB-1.
DoD classifies this control in the subject area of “Continuity” with a impact of “High”.