Skip to content

Fabric switch configurations and management station configuration are not archived and/or copies of the operating system and other critical software for all SAN components are not stored in a fire rated container or are not collocated with the operational software.

An XCCDF Rule

Description

.Backup and recovery procedures are critical to the security and availability of the SAN system. If a system is compromised, shut down, or otherwise not available for service, this could hinder the availability of resources to the warfighter. The IAO/NSO will ensure that all fabric switch configurations and management station configuration are archived and copies of the operating system and other critical software for all SAN components are stored in a fire rated container or otherwise not collocated with the operational software.

Property Value
Responsibility Information Assurance Officer
IA Controls COSW-1

ID
SV-6809r1_rule
Version
SAN05.001.00
Severity
Medium
Updated

Remediation Templates

A Manual Procedure

Develop a plan that will ensure that all fabric switch configurations and management station configuration are archived and copies of the operating system and other critical software for all SAN components are stored in a fire rated container or otherwise not collocated with the operational software.  Obtain CM approval for the plan and implement the plan.