CMMC 1.0 Practice RE.2.138 Requirement:
Protect the confidentiality of backup “Controlled Unclassified Information” (CUI) at storage locations.
CMMC 1.0 RE.2.138 Requirement Explanation:
Backups containing “Controlled Unclassified Information” (CUI) must stored on an encrypted drive or location to prevent unauthorized access.
Example CMMC 1.0 RE.2.138 Implementation:
Encrypt the digital media where you store backups containing “Controlled Unclassified Information” (CUI). Store these backups in a physically secure location (e.g. a locked room or container). Only allow authorized persons access to your backups.
CMMC 1.0 RE.2.138 Scenario(s):
- Scenario 1:
Your company has a file server containing “Controlled Unclassified Information” (CUI). Because it contains “Controlled Unclassified Information” (CUI) you ensure that backups of the system are saved to an encrypted drive. You keep all backups in a locked room.
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.