5.6.2.5
Backup and Encrypt Data
Encrypted Backups
Backup and Encrypt Data – Encrypted Backups – Organizations should consider the use of encrypted backups with securely stored and recoverable key material. Decryption keys and/or unencrypted backups should be stored securely and should be
accessible only to authorized employees or officers.
-
5.33 Protection of Records: Safeguard records against loss, destruction, falsification, unauthorized access, and release.
5.37 Documented Operating Procedures: Document and provide operating procedures for information processing facilities to relevant personnel.
8.11 Data Masking: Utilize data masking in alignment with the organization’s access control policy and other relevant policies, along with business requirements, while considering applicable legislation.
8.12 Data Leakage Prevention: Apply data leakage prevention measures to systems, networks, and other devices handling sensitive information.
8.13 Information Backup: Maintain and regularly test backup copies of information, software, and systems as per the agreed topic-specific backup policy.
8.24 Use of Cryptography: Define and implement rules for the efficient use of cryptography, including cryptographic key management.
-
3.8.9 Protect the confidentiality of backup CUI at storage locations.
3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
-
3.8.9 Protect the confidentiality of backup CUI at storage locations.
3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).