Back

Include addressing backup failures in the recovery plan.


CONTROL ID
13298
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a recovery plan., CC ID: 13288

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Procedures are in place for backing up data, monitoring to detect backup failures, and initiating corrective action when such failures occur. (A1.2 ¶ 2 Bullet 8 Performs Data Backup, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (with Revised Points of Focus – 2022))
  • Procedures are in place for backing up data, monitoring to detect back-up failures, and initiating corrective action when such failures occur. (A1.2 Performs Data Backup, Trust Services Criteria)
  • Procedures are in place for backing up data, monitoring to detect backup failures, and initiating corrective action when such failures occur. (A1.2 ¶ 2 Bullet 8 Performs Data Backup, Trust Services Criteria, (includes March 2020 updates))
  • One or more processes to verify the successful completion of the backup processes in Part 1.3 and to address any backup failures. (CIP-009-6 Table R1 Part 1.4 Requirements ¶ 1., North American Electric Reliability Corporation Critical Infrastructure Protection Standards Cyber Security - Recovery Plans for BES Cyber Systems CIP-009-6, Version 6)