5.6.2.4
Backup and Encrypt Data
Offsite Storage
The organization shall store backups at a fully offsite location at regular intervals to provide diversity in the event of a disaster (fire, flood, earthquake or localized cyber security incident).
-
5.14 Information Transfer: Establish information transfer rules, procedures, or agreements for all internal and external transfer facilities.
5.33 Protection of Records: Safeguard records against loss, destruction, falsification, unauthorized access, and release.
5.37 Documented Operating Procedures: Document and provide operating procedures for information processing facilities to relevant personnel.
7.5 Protecting Against Physical and Environmental Threats: Design and implement safeguards against physical and environmental threats, including natural disasters and intentional or unintentional physical risks to infrastructure.
7.9 Security of Assets Off-Premises: Assets located off-site should be safeguarded.
8.12 Data Leakage Prevention: Apply data leakage prevention measures to systems, networks, and other devices handling sensitive information.
8.13 Information Backup: Maintain and regularly test backup copies of information, software, and systems as per the agreed topic-specific backup policy.
-
3.8.1 Protect (i.e., physically control and securely store) system media containing CUI, both paper and digital.
3.8.9 Protect the confidentiality of backup CUI at storage locations.
-
3.8.1 Protect (i.e., physically control and securely store) system media containing CUI, both paper and digital.
3.8.9 Protect the confidentiality of backup CUI at storage locations.