NIST SP 800-171 & CMMC 2.0 3.8.9 Requirement:

Protect the confidentiality of backup “Controlled Unclassified Information” (CUI) at storage locations.

NIST SP 800-171 & CMMC 2.0 3.8.9 Requirement Explanation:

Backups containing “Controlled Unclassified Information” (CUI) must stored on an encrypted drive or location to prevent unauthorized access.

Example NIST SP 800-171 & CMMC 2.0 3.8.9 Implementation:

Encrypt the digital media where you store backups containing “Controlled Unclassified Information” (CUI). Store these backups in a physically secure location (e.g. a locked room or container). Only allow authorized persons access to your backups.

NIST SP 800-171 & CMMC 2.0 3.8.9 Scenario(s):

- Scenario 1:

Your company has a file server containing “Controlled Unclassified Information” (CUI). Because it contains “Controlled Unclassified Information” (CUI) you ensure that backups of the system are saved to an encrypted drive. You keep all backups in a locked room.
 

Quick & Simple

Discover Our Cybersecurity Compliance Solutions:

Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you

 NIST SP 800-171 & CMMC Compliance App

NIST SP 800-171 & CMMC Compliance

Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
 HIPAA Compliance App

HIPAA Compliance

Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
 FAR 52.204-21 Compliance App

FAR 52.204-21 Compliance

Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
 ISO 27001 Compliance App

ISO 27001 Compliance

Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.