← Back to IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide

V-256856

CAT II (Medium)

Backup of critical data for the HMC and its components must be documented and tracked

Rule ID

SV-256856r890914_rule

STIG

IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide

Version

V2R1

CCIs

V-24844

Discussion

If procedures for performing backup and recovery of critical data for the HMC is not in place, system recoverability may be jeopardized and overall security compromised.

Check Content

Review the documentation for backup of critical data for a HMC with the System Administrator.
Review documentation for completeness and accuracy.

If no documentation exists, this is a FINDING.

Fix Text

Verify that procedures for backup of the critical data for the HMCs are properly documented. If not, create Backup Procedures documentation.

CPC data should be backed-up when configuration or CPC- licensed internal code changes have been made or as a routine preventive maintenance procedure.