RE.2.137 Regularly perform and test data backups.

CMMC Practice RE.2.137: Regularly perform and test data backups.

Links to Publicly Available Resources

CMMC CLARIFICATION (Ref CMMC – Appendix B)

Back up your organizational data so you can recover it if a hardware failure, software failure, or malware infection occurs. You can schedule backups to run automatically or manually. Many operating systems include a built-in feature to perform data backups.

After you create a backup, it is important to test it on a regular basis. When you test a backup, verify that the operating system, applications, and data are intact and functional. If you test data backups regularly, you will be in a better position to recover systems and files more efficiently if a failure or infection occurs.