STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must be configured to conduct backups of system level information.

DISA Rule

SV-246944r961863_rule

Vulnerability Number

V-246944

Group Title

SRG-APP-000516-NDM-000340

Rule Version

NAOT-CM-000007

Severity

CAT II

CCI(s)

• CCI-000537 - Conduct backups of system-level information contained in the system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

Configure ONTAP to conduct backups of system level information with "set -privilege advanced" reply "y" to continue and "system configuration backup create -node <node_name> -backup-type cluster -backup-name <name>".

Check Contents

Use "set -privilege advanced" reply "y" to continue and "system configuration backup show" to see if ONTAP is configured for system backups.

If ONTAP is not configured to conduct backups of system-level data when changes occur, this is a finding.

Vulnerability Number

V-246944

Documentable

False

Rule Version

NAOT-CM-000007

Severity Override Guidance

Use "set -privilege advanced" reply "y" to continue and "system configuration backup show" to see if ONTAP is configured for system backups.

If ONTAP is not configured to conduct backups of system-level data when changes occur, this is a finding.

Check Content Reference

M

Target Key

5415