Skip to main content

CCC.Core.CN14: Maintain Recent Backups

Control ID:CCC.Core.CN14
Title:Maintain Recent Backups
Objective:Ensure that all backups used for disaster recovery are recent and subject to a retention policy that limits deletion.
Control Family:
Data

Related Threats

IDTitleDescriptionExternal MappingsCapability MappingsControl Mappings
CCC.Core.TH06Data is Lost or CorruptedServices that rely on accurate data are susceptible to disruption in the event of data loss or corruption. Any actions that lead to the unintended deletion, alteration, or limited access to data can impact the availability of the service and the system it is part of.
1
1
0

Related Capabilities

IDTitleDescription
CCC.Core.CP11BackupThe service can generate copies of its data or configurations in the form of automated backups, snapshot-based backups, or incremental backups.
CCC.Core.CP18Resource VersioningThe service automatically assigns versions to child resources which can be used to preserve, retrieve, and restore past iterations.

Assessment Requirements

IDDescriptionApplicability
CCC.Core.CN14.AR01When backups are created for disaster recovery purposes, the storage mechanism MUST NOT allow modification or deletion within 30 days of creation.
tlp-clear
tlp-green
tlp-amber
tlp-red
CCC.Core.CN14.AR02When backups are created for disaster recovery purposes, the most recent backup MUST have a creation date within the past 30 days.
tlp-clear
tlp-green
tlp-amber
CCC.Core.CN14.AR02When backups are created for disaster recovery purposes, the most recent backup MUST have a creation date within the past 14 days.
tlp-red