Backups of data, applications and settings are performed and retained in accordance with business criticality and business continuity requirements. Backups of data, applications and settings are synchronised to enable restoration to a common point in time. Backups of data, applications and settings are retained in a secure and resilient manner. Restoration of data, applications and settings from backups to a common point in time is tested as part of disaster recovery exercises. Unprivileged user accounts cannot access backups belonging to other user accounts. Unprivileged user accounts are prevented from modifying and deleting backups.
ACSC Essential Eight BACKUP-ML1 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ACSC Essential Eight your existing evidence covers. Hold FedRAMP Moderate and 18 of 24 ACSC Essential Eight controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the FedRAMP Moderate pair alone.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.