Backup and Recovery

Information technology resource administrators shall conduct backups of user-level, application-level, and system-level information commensurate with the assessment level of risk and protect backup information at the storage location. Measures to protect backup media shall be commensurate with the importance and sensitivity of the data and should include physically secured off-site copies as appropriate.

Applicable policies