CP-9(3)—Information System Backup

PBMM (P2)

Secret (P2)

Operational

>Control Description

INFORMATION SYSTEM BACKUP | SEPARATE STORAGE FOR CRITICAL INFORMATION The organization stores backup copies of ⚙organization-defined critical information system software and other security-related information in a separate facility or in a fire-rated container that is not collocated with the operational system.

>Supplemental Guidance

Critical information system software includes, for example, operating systems, cryptographic key management systems, and intrusion detection/prevention systems. Security-related information includes, for example, organizational inventories of hardware, software, and firmware components. Alternate storage sites typically serve as separate storage facilities for organizations.

Related controls: CM-2, CM-8.

Ask AI

Configure your API key to use AI features.