STIGQter: STIG Summary: Oracle Linux 6 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The operating system must conduct backups of user-level information contained in the operating system per organization defined frequency to conduct backups consistent with recovery time and recovery point objectives.

DISA Rule

SV-219585r603263_rule

Vulnerability Number

V-219585

Group Title

SRG-OS-000480

Rule Version

OL6-00-000504

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Procedures to back up user data from the system must be established and executed. The operating system provides utilities for automating such a process. Commercial and open-source products are also available.

Implement a process whereby user data is backed up from the system in accordance with local policies.

Check Contents

Ask an administrator if a process exists to back up user data from the system.

If such a process does not exist, this is a finding.

Vulnerability Number

V-219585

Documentable

False

Rule Version

OL6-00-000504

Severity Override Guidance

Ask an administrator if a process exists to back up user data from the system.

If such a process does not exist, this is a finding.

Check Content Reference

M

Target Key

2928

Comments