System Recovery Backup procedures must be configured to comply with DoD requirements.

From MAC OSX 10.6 Workstation Security Technical Implementation Guide

Part of OSX00675-System Recovery Backups

Associated with IA controls: CODB-1

SV-37320r1_rule System Recovery Backup procedures must be configured to comply with DoD requirements.

Vulnerability discussion

Recovery of a damaged or compromised system in a timely basis is difficult without a system information backup. A system backup will usually include sensitive information, such as user accounts that could be used in an attack. As a valuable system resource, the system backup should be protected and stored in a physically secure location.

Check content

Interview the SA to determine if system recovery backup procedures are in place complying with DoD requirements. Any of the following would be a finding: • The site does not maintain emergency system recovery data. • The emergency system recovery data is not protected from destruction and stored in a locked storage container. • The emergency system recovery data has not been updated following the last system modification.

Fix text

Implement data backup procedures complying with DoD requirements.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.