|

controlCP-9

System Backup (CP-9)

Conduct backups of user-level information contained in [organization-defined] [organization-defined]; Conduct backups of system-level information contained in the system [organization-defined]; Conduct backups of system documentation, including security- and privacy-related documentation [organization-defined] ; and Protect the confidentiality, integrity, and availability of backup information.

Security Baselines

LOWMODERATEHIGH

contingencydisaster-recoverybusiness-continuity

Why These Connect

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports32

These related controls work together — a change to one may affect the others.

Mitigates2

This control helps defend against or reduce the risk of the linked threat technique.

Enhances8

These enhancements add specific capabilities or refinements to the base control.

Threat Coverage(2 ATT&CK techniques)

T1486Data Encrypted for Impact T1485Data Destruction

Control Enhancements(8)

CP-9(1)Testing for Reliability and Integrity (CP-9(1))

CP-9(2)Test Restoration Using Sampling (CP-9(2))

CP-9(3)Separate Storage for Critical Information (CP-9(3))

CP-9(4)Protection from Unauthorized Modification (CP-9(4))W

CP-9(5)Transfer to Alternate Storage Site (CP-9(5))

CP-9(6)Redundant Secondary System (CP-9(6))

CP-9(7)Dual Authorization for Deletion or Destruction (CP-9(7))

CP-9(8)Cryptographic Protection (CP-9(8))

See Also

@SP 800-53 Overview ⚖Compare Baselines