STIGs RMF Controls Compare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

Browse STIGs
Search
RMF Controls
Compare Versions

Resources

About
Release Notes
VPAT
DISA STIG Library

STIGs updated 2 hours ago

Powered by Pylon

© 2026 Beacon Cloud Solutions, Inc. All rights reserved.

← CP-9 — System Backup

CCI-000539

Definition

Conduct backups of system documentation, including security-related documentation, per an organization-defined frequency that is consistent with recovery time and recovery point objectives.

Parent Control

CP-9System BackupContingency Planning

Linked STIG Checks (18)

V-271921CAT IIThe Cisco ACI must conduct backups of the configuration weekly or at an organization-defined frequency and store on a separate device.Cisco ACI NDM Security Technical Implementation Guide V-242638CAT IIIThe Cisco ISE must conduct configuration and operational backups when changes are made or must schedule backups weekly, at a minimum.Cisco ISE NDM Security Technical Implementation Guide V-217422CAT IIThe BIG-IP appliance must be configured to create backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.F5 BIG-IP Device Management Security Technical Implementation Guide V-266096CAT IIThe F5 BIG-IP appliance must conduct backups of the configuration at a weekly or organization-defined frequency and store on a separate device.F5 BIG-IP TMOS NDM Security Technical Implementation Guide V-255634CAT IIICounterACT must support organizational requirements to conduct backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.ForeScout CounterACT NDM Security Technical Implementation Guide V-230957CAT IIForescout must support organizational requirements to conduct backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.Forescout Network Device Management Security Technical Implementation Guide V-234196CAT IIThe FortiGate device must support organizational requirements to conduct backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.Fortinet FortiGate Firewall NDM Security Technical Implementation Guide V-266972CAT IIAOS must support organizational requirements to conduct backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.HPE Aruba Networking AOS NDM Security Technical Implementation Guide V-268252CAT IIThe HYCU virtual appliance must support organizational requirements to conduct backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.HYCU Protege Security Technical Implementation Guide V-258612CAT IIThe ICS must be configured to support organizational requirements to conduct weekly backups of information system documentation, including security-related documentation.Ivanti Connect Secure NDM Security Technical Implementation Guide V-237433CAT IIISCOM unsealed management packs must be backed up regularly.Microsoft SCOM Security Technical Implementation Guide V-202137CAT IIThe network device must support organizational requirements to conduct backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.Network Device Management Security Requirements Guide V-256096CAT IIIThe Riverbed NetProfiler must be configured to conduct backups of system-level information and system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.Riverbed NetProfiler Security Technical Implementation Guide V-279272CAT IIThe Edge SWG must be configured to conduct backups of system-level information contained in the information system when changes occur.Symantec Edge SWG NDM Security Technical Implementation Guide V-242256CAT IIThe TippingPoint SMS must support organizational requirements to conduct backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.Trend Micro TippingPoint NDM Security Technical Implementation Guide V-265350CAT IIThe NSX Manager must be configured to conduct backups on an organizationally defined schedule.VMware NSX 4.x Manager NDM Security Technical Implementation Guide V-69215CAT IIIThe NSX Manager must support organizational requirements to conduct backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.VMware NSX Manager Security Technical Implementation Guide V-251791CAT IIThe NSX-T Manager must support organizational requirements to conduct backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.VMware NSX-T Manager NDM Security Technical Implementation Guide