Statement

West Texas A&M University will conduct backups of user-level information contained in the information system, conduct backups of system-level information contained in the information system, conduct backups of information system documentation including security-related documentation, and protect the confidentiality, integrity, and availability of backup information at storage locations.

Applicability

This Control applies to all West Texas A&M network information resources. The intended audience for this Control includes all information resource owners, custodians, and users of information resources.

Implementation

WTAMU will protect Critical information systems with a backup strategy which uses immutable backup storage and/or an out-of-band backup process that prevents direct access to backup storage from the production networks, as applicable.