STIGQter: STIG Summary: IBM MQ Appliance v9.0 NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 05 Jun 2017:

The MQ Appliance network device must support organizational requirements to conduct backups of system level information contained in the information system when changes occur or weekly, whichever is sooner.

DISA Rule

SV-89695r1_rule

Vulnerability Number

V-75021

Group Title

SRG-APP-000516-NDM-000340

Rule Version

MQMH-ND-001490

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-000537 - The organization conducts backups of system-level information contained in the information system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

Configure the MQ appliance to use one of the following backup solutions.

- High Availability (HA) configuration of paired appliances
- Disaster Recovery (DR) configuration using a paired off-site appliance
- Manual backup and restore

Check Contents

Interview the system admin and determine how the MQ system is backed up.

The MQ Appliance provides three features for providing system backup:

- High Availability (HA) configuration of paired appliances
https://ibm.biz/Bd43aV
- Disaster Recovery (DR) configuration using a paired off-site appliance
https://ibm.biz/Bd43au
- Manual backup and restore
https://ibm.biz/Bd43ah

If manual backup and restore is used verify backups are performed when changes to the system occur or at least weekly.

If none of the above methods are employed or if no backups exist, this is a finding.

Vulnerability Number

V-75021

Documentable

False

Rule Version

MQMH-ND-001490

Severity Override Guidance

Interview the system admin and determine how the MQ system is backed up.

The MQ Appliance provides three features for providing system backup:

- High Availability (HA) configuration of paired appliances
https://ibm.biz/Bd43aV
- Disaster Recovery (DR) configuration using a paired off-site appliance
https://ibm.biz/Bd43au
- Manual backup and restore
https://ibm.biz/Bd43ah

If manual backup and restore is used verify backups are performed when changes to the system occur or at least weekly.

If none of the above methods are employed or if no backups exist, this is a finding.

Check Content Reference

M

Target Key

3243

Comments