Backup of SharePoint system level files for critical systems must be performed when identified as required by the owning organization.

From MS SharePoint 2010 Security Technical Implementation Guide

Associated with: CCI-000537

SV-36698r1_rule Backup of SharePoint system level files for critical systems must be performed when identified as required by the owning organization.

Vulnerability discussion

Information system backup is a critical step in maintaining data assurance and availability. System-level information includes: system-state information, operating system and application software, and licenses.

Check content

1. Verify the SharePoint farm servers, particularly those designated as critical information systems, are backed up periodically on a schedule identified by the DAA or designated representative. 2. Mark as a finding if backup is not performed or is not performed in compliance with required frequency.

Fix text

Backup SharePoint farm servers, particularly those designated as critical information systems periodically on a schedule identified by the DAA or designated representative.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.