SFS 2 / SF 1

Back to SFS 2

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are backup copies for critical services stored in secure, access-controlled locations throughout the review period to prevent unauthorized access or modification?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Backups stored in physically/logically secured environments with documented access controls

Assessment criterion and evidence

Actor: Organization. Scope: All backup copies protecting critical services. Evidence period: Entire review period. Required evidence: Documentation of backup storage security controls; Access logs for backup repositories. Negative criterion: Backups stored in unsecured or publicly accessible locations. Missing evidence: Pending evidence determination

View the JSON record (opens in a new tab).

Assessment result: unset.