SC-28(2): Offline Storage

Control Family:

System and Communications Protection

Parent Control:

SC-28: Protection of Information at Rest

CSF v1.1 References:

PR.DS-1

Threats Addressed:

Tampering
Information Disclosure

Baselines:

(Not part of any baseline)

Previous Version:

NIST Special Publication 800-53 Revision 4:
SC-28(2): Off-Line Storage

Control Statement

Remove the following information from online storage and store offline in a secure location: [Assignment: organization-defined information].

Supplemental Guidance

Removing organizational information from online storage to offline storage eliminates the possibility of individuals gaining unauthorized access to the information through a network. Therefore, organizations may choose to move information to offline storage in lieu of protecting such information in online storage.