NIST SP 800-53 Revision 5.1 HIGH
CP Contingency Planning

NIST SP 800-53 Revision 5.1 HIGH CP-9(8): System Backup | Cryptographic Protection. Implement cryptographic mechanisms to prevent unauthorized disclosure and modification of [Assignment: organization-defined backup information]

System Backup | Cryptographic Protection. Implement cryptographic mechanisms to prevent unauthorized disclosure and modification of [Assignment: organization-defined backup information]

What else in your programme already covers this

This control maps to 29 controls across 16 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

SOC 2 · 4 controls

  • SOC2-C1.1 Confidential information is identified and protected during receipt, processing, storage
  • SOC2-CC5.2 COSO principle 11: Selects and develops general controls over technology
  • SOC2-CC6.1 Implements logical access security software, infrastructure and architectures over protected information assets
  • SOC2-CC6.7 Transmission of data is restricted to authorized users

C5 (Germany) · 3 controls

  • C5-CRY-03 Encryption of sensitive data for storage
  • C5-OPS-06 Data Backup and Recovery - Concept
  • C5-OPS-09 Data Backup and Recovery - Storage

NIST SP 800-53 Rev 5 · 3 controls

PCI DSS 4.0 · 3 controls

  • 10.3.2 Logs protected from modification
  • 9.4.1.1 Offline media backup security
  • 3.6.1 Procedures are defined and implemented to protect cryptographic keys used to protect stored account data against disclosure and misuse that include: • Access to keys is restricted to the fewest number of custodians necessary.

CIS Controls v8 · 2 controls

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

ISO 27001:2022 · 2 controls

  • 8.13 Information backup
  • 8.24 Use of cryptography

ISO 27002:2022 · 2 controls

  • 8.13 Information backup
  • 8.24 Use of cryptography

ACSC Essential Eight · 1 control

Azure Security Benchmark · 1 control

  • BR-2 Protect backup and recovery data

CMMC 2.0 · 1 control

DORA · 1 control

HIPAA Security Rule · 1 control

NIST Cybersecurity Framework 2.0 · 1 control

NIST SP 800-171 Rev 3 · 1 control

  • 03.08.09 System Backup - Cryptographic Protection

NIST SP 800-66 Rev 2 · 1 control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in CP Contingency Planning

Query this from an agent

The graph holds this control, the 29 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-53 Revision 5.1 HIGH controls