STIGQter: STIG Summary: Oracle Database 11g Installation STIG Version: 8 Release: 20 Benchmark Date: 28 Jul 2017:

Database backup procedures should be defined, documented and implemented.

DISA Rule

SV-30765r1_rule

Vulnerability Number

V-15126

Group Title

DBMS backup procedures

Rule Version

DG0013-ORACLE11

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Develop, document and implement database backup procedures.

Include weekly backup procedures and offline backup data storage.

Check Contents

Review the database backup procedures and implementation evidence.

Evidence of implementation includes records of backup events and physical review of backup media.

Evidence should match the backup plan as recorded in the System Security Plan.

If backup procedures do not exist or not implemented in accordance with the procedures, this is a Finding.

If backups are not performed weekly or more often, this is a Finding.

Vulnerability Number

V-15126

Documentable

False

Rule Version

DG0013-ORACLE11

Severity Override Guidance

Review the database backup procedures and implementation evidence.

Evidence of implementation includes records of backup events and physical review of backup media.

Evidence should match the backup plan as recorded in the System Security Plan.

If backup procedures do not exist or not implemented in accordance with the procedures, this is a Finding.

If backups are not performed weekly or more often, this is a Finding.

Check Content Reference

I

Responsibility

Database Administrator

Target Key

1368

Comments