+CP-09(01) [M] Testing for Reliability and Integrity
|
CP-09(01) [M] Testing for Reliability and Integrity
Control
Test backup information [Assignement: organization-defined frequency] to verify media reliability and information integrity.
Discussion
Organizations need assurance that backup information can be reliably retrieved. Reliability pertains to the systems and system components where the backup information is stored, the operations used to retrieve the information, and the integrity of the information being retrieved. Independent and specialized tests can be used for each of the aspects of reliability. For example, decrypting and transporting (or transmitting) a random sample of backup files from the alternate storage or backup site and comparing the information to the same information at the primary processing site can provide such assurance.
Assessment Objective
- backup information is tested [Assignement: frequency] to verify media reliability;
- backup information is tested [Assignement: frequency] to verify information integrity.
Assessment Method
Examine
Contingency planning policy
procedures addressing system backup
contingency plan
system backup test results
contingency plan test documentation
contingency plan test results
system security plan
other relevant documents or records
Interview
Organizational personnel with system backup responsibilities
organizational personnel with information security responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|