DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3
Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 5.12: Backups: CSP backups under CP-9, mission owner responsibility and off-CSP copies for higher impact data

What does 5.12 require?

CSPs provide backups of CSO data consistent with control CP-9, and mission owners stay accountable for having their own data backed up to the same control; because relying on one non-DoD provider is a risk, mission owners with higher impact data should take regular backups of their own stored in DoD-owned infrastructure or media or with a different CSP, and all mission owners prepare to recover or migrate data on short notice if a CSO shuts down.

Maintained by Gerard Blokdyk

Other controls in Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 controls