03.08.09: System Backup — Cryptographic Protection
Control Family:
CSF v1.1 References:
Threats Addressed:
Previous Version:
- NIST Special Publication 800-171 Revision 2:
- 3.8.9: Protect the confidentiality of backup CUI at storage locations
Requirements
- Protect the confidentiality of backup information.
- Implement cryptographic mechanisms to prevent the unauthorized disclosure of CUI at backup storage locations.
Discussion
The selection of cryptographic mechanisms is based on the need to protect the confidentiality of backup information. Hardware security module (HSM) devices safeguard and manage cryptographic keys and provide cryptographic processing. Cryptographic operations (e.g., encryption, decryption, and signature generation and verification) are typically hosted on the HSM device, and many implementations provide hardware-accelerated mechanisms for cryptographic operations. This requirement is related to 03.13.11.