CP-9—System Backup

Conduct backups of user-level information contained in ⚙organization-defined system components ⚙organization-defined frequency consistent with recovery time and recovery point objectives;

Conduct backups of system-level information contained in the system ⚙organization-defined frequency consistent with recovery time and recovery point objectives;

Conduct backups of system documentation, including security- and privacy-related documentation ⚙organization-defined frequency consistent with recovery time and recovery point objectives; and

Protect the confidentiality, integrity, and availability of backup information.