Oracle must back up user-level information per a defined frequency.

From Oracle Database 11.2g Security Technical Implementation Guide

Associated with: CCI-000535

SV-66461r2_rule Oracle must back up user-level information per a defined frequency.

Vulnerability discussion

Information system backup is a critical step in maintaining data assurance and availability. User-level information is data generated by information system and/or application users. In order to assure availability of this data in the event of a system failure, DoD organizations are required to ensure user-generated data is backed up at a defined frequency. This includes data stored on file systems, within databases or within any other storage media.Applications performing backups must be capable of backing up user-level information per the DoD-defined frequency. Databases that do not backup information regularly risk the loss of that information in the event of a system failure. Most databases contain functionality to allow regular backups; it is important that this functionality is enabled and configured correctly to prevent data loss.

Check content

Review DBMS settings and site documentation to determine whether Oracle is configured to back up user-level data according to a defined frequency. If it is not, this is a finding. (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For on-going jobs, this view displays progress and status.)

Fix text

Configure the Oracle DBMS to back up user-level data on a defined frequency.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.