STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 2 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← CP-9 — System Backup

CCI-000537

Definition

Conduct backups of system-level information contained in the system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Parent Control

CP-9System BackupContingency Planning

Linked STIG Checks (36)

V-222638CAT IIData backup must be performed at required intervals in accordance with DoD policy.Application Security and Development Security Technical Implementation GuideV-217377CAT IIIThe Arista Multilayer Switch must support organizational requirements to conduct backups of system-level information contained in the information system when changes occur or weekly, whichever is sooner.Arista MLS DCS-7000 Series NDM Security Technical Implementation GuideV-255964CAT IIThe network device must be configured to conduct backups of system level information contained in the information system when changes occur.Arista MLS EOS 4.2x NDM Security Technical Implementation GuideV-255964CAT IIThe network device must be configured to conduct backups of system level information contained in the information system when changes occur.Arista MLS EOS 4.X NDM Security Technical Implementation GuideV-239941CAT IIThe Cisco ASA must be configured to conduct backups of system-level information contained in the information system when changes occur.Cisco ASA NDM Security Technical Implementation GuideV-215710CAT IIThe Cisco router must be configured to back up the configuration when changes occur.Cisco IOS Router NDM Security Technical Implementation GuideV-220618CAT IIThe Cisco switch must be configured to support organizational requirements to conduct backups of the configuration when changes occur.Cisco IOS Switch NDM Security Technical Implementation GuideV-215855CAT IIThe Cisco router must be configured to back up the configuration when changes occur.Cisco IOS XE Router NDM Security Technical Implementation GuideV-220566CAT IIThe Cisco switch must be configured to support organizational requirements to conduct backups of the configuration when changes occur.Cisco IOS XE Switch NDM Security Technical Implementation GuideV-216545CAT IIThe Cisco router must be configured to back up the configuration when changes occur.Cisco IOS XR Router NDM Security Technical Implementation GuideV-242638CAT IIIThe Cisco ISE must conduct configuration and operational backups when changes are made or must schedule backups weekly, at a minimum.Cisco ISE NDM Security Technical Implementation GuideV-220514CAT IIThe Cisco switch must be configured to support organizational requirements to conduct backups of the configuration when changes occur.Cisco NX OS Switch NDM Security Technical Implementation GuideV-217421CAT IIIThe BIG-IP appliance must create backups of system-level information contained in the information system when changes occur or weekly, whichever is sooner.F5 BIG-IP Device Management Security Technical Implementation GuideV-255633CAT IICounterACT must support organizational requirements to conduct backups of system-level information contained in the information system when changes occur or weekly, whichever is sooner.ForeScout CounterACT NDM Security Technical Implementation GuideV-230956CAT IIForescout must be configured to conduct backups of system-level information contained in the information system when changes occur.Forescout Network Device Management Security Technical Implementation GuideV-234195CAT IIThe FortiGate device must conduct backups of system-level information contained in the information system when changes occur.Fortinet FortiGate Firewall NDM Security Technical Implementation GuideV-217481CAT IIIThe HP FlexFabric Switch must support organizational requirements to conduct backups of system level information contained in the information system when changes occur or weekly, whichever is sooner.HP FlexFabric Switch NDM Security Technical Implementation GuideV-266971CAT IIAOS must be configured to conduct backups of system-level information contained in the information system when changes occur.HPE Aruba Networking AOS NDM Security Technical Implementation GuideV-268253CAT IIThe HYCU virtual appliance must off-load audit records onto a different system or media than the system being audited.HYCU Protege Security Technical Implementation GuideV-65183CAT IIThe DataPower Gateway must support organizational requirements to conduct backups of system level information contained in the information system when changes occur or weekly, whichever is sooner.IBM DataPower Network Device Management Security Technical Implementation GuideV-255772CAT IIThe MQ Appliance network device must support organizational requirements to conduct backups of system level information contained in the information system when changes occur or weekly, whichever is sooner.IBM MQ Appliance v9.0 NDM Security Technical Implementation GuideV-223487CAT IIACF2 BACKUP GSO record must be defined with a TIME value specifies greater than 00 unless the database is shared and backed up on another system.IBM z/OS ACF2 Security Technical Implementation GuideV-258625CAT IIThe ICS must be configured to conduct backups of system level information contained in the information system when changes occur.Ivanti Connect Secure NDM Security Technical Implementation GuideV-251004CAT IIISentry must be configured to conduct backups of system level information contained in the information system when changes occur.Ivanti Sentry 9.x NDM Security Technical Implementation GuideV-253942CAT IIThe Juniper EX switch must be configured to conduct backups of system level information contained in the information system when changes occur.Juniper EX Series Switches Network Device Management Security Technical Implementation GuideV-217351CAT IIThe Juniper router must be configured to support organizational requirements to conduct backups of the configuration when changes occur.Juniper Router NDM Security Technical Implementation GuideV-237433CAT IIISCOM unsealed management packs must be backed up regularly.Microsoft SCOM Security Technical Implementation GuideV-246944CAT IIONTAP must be configured to conduct backups of system level information.NetApp ONTAP DSC 9.x Security Technical Implementation GuideV-202136CAT IIThe network device must be configured to conduct backups of system level information contained in the information system when changes occur.Network Device Management Security Requirements GuideV-275462CAT IIThe Riverbed NetIM must support organizational requirements to back up the NetIM application and security configuration when changes occur.Riverbed NetIM NDM Security Technical Implementation GuideV-256096CAT IIIThe Riverbed NetProfiler must be configured to conduct backups of system-level information and system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.Riverbed NetProfiler Security Technical Implementation GuideV-279272CAT IIThe Edge SWG must be configured to conduct backups of system-level information contained in the information system when changes occur.Symantec Edge SWG NDM Security Technical Implementation GuideV-94689CAT IISymantec ProxySG must support organizational requirements to conduct backups of system level information contained in the ProxySG when changes occur or weekly, whichever is sooner.Symantec ProxySG NDM Security Technical Implementation GuideV-242255CAT IIThe TippingPoint SMS must be configured to conduct backups of system level information contained in the information system when changes occur.Trend Micro TippingPoint NDM Security Technical Implementation GuideV-69213CAT IIIThe NSX Manager must support organizational requirements to conduct backups of system-level information contained in the information system when changes occur or weekly, whichever is sooner.VMware NSX Manager Security Technical Implementation GuideV-251790CAT IIThe NSX-T Manager must be configured to conduct backups on an organizationally defined schedule.VMware NSX-T Manager NDM Security Technical Implementation Guide