03.08.09 System Backup – Cryptographic Protection

Statement

• a. Protect the confidentiality of backup information.

• b. Implement cryptographic mechanisms to prevent the unauthorized disclosure of CUI at backup storage locations.

Guidance

The selection of cryptographic mechanisms is based on the need to protect the confidentiality of backup information. Hardware security module (HSM) devices safeguard and manage cryptographic keys and provide cryptographic processing. Cryptographic operations (e.g., encryption, decryption, and signature generation and verification) are typically hosted on the HSM device, and many implementations provide hardware-accelerated mechanisms for cryptographic operations. This requirement is related to [](#/cprt/framework/version/SP_800_171_3_0_0/home?element=03.13.11) 03.13.11.

Assessment objective

cryptographic mechanisms are implemented to prevent the unauthorized disclosure of CUI at backup storage locations.

Assessment objective

the confidentiality of backup information is protected.

Assessment method

• contingency planning policy and procedures procedures for system backup contingency plan system design documentation system configuration settings system security plan other relevant documents or records

Assessment method

• personnel with system backup responsibilities personnel with information security responsibilities

Assessment method

• mechanisms for supporting or implementing the cryptographic protection of backup information

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

3. Související regulace

Propojené úkoly

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final