Policy 7230A - Department of Administration
Policy 7230A - Department of Administration Policy 7230A - Department of Administration
Monthly backups will be retained for 12 months, weekly backups will be retained for 5 weeks and daily backups will be retained for 7 days. • Those systems not deemed as critical by the organization will be fully backed up on a monthly basis and incrementally or differentially backed up on weekly basis. Monthly backups will be retained for 6 months and weekly backups will be retained for 2 weeks. 9.4. Maintain Records Capture documentation appropriate to all contingency planning standards: • Document and retain copies of contingency roles, responsibilities, assigned individuals and appropriate contact information. • Document and retain copies of contingency training materials. • Document and retain copies of the contingency plan, including preparatory materials (i.e. Business Impact Analysis output). • Document and retain copies of completed contingency tests. Mandatory Baselines Page 20 of 25
10. Physical Security No applicable Mandatory Baselines. Mandatory Non-Mandatory Procedures Baselines Procedures Baselines 10. Physical Security 10.1. Physical Access Control 10.1.1. Control Physical Access (5 sets) (4 sets) 10.2. Physical Environmental Control 10.2.1. Provide Environmental Controls (5 sets) (5 sets) 10.3. Maintain Records Mandatory Baselines Page 21 of 25
- Page 59 and 60: 6.2. Integrity Operations .........
- Page 61 and 62: 2. Assessment & Security Planning T
- Page 63 and 64: 2.2. Create a Security Plan No appl
- Page 65 and 66: 3.1.1.2 Create Training Materials O
- Page 67 and 68: Operations Training is defined as t
- Page 69 and 70: access individual system authentica
- Page 71 and 72: 5. Systems Configuration These Syst
- Page 73 and 74: 5.3.1.3 Restrict Access to Media No
- Page 75 and 76: • When no longer required, data s
- Page 77 and 78: 8. Incident Response These Incident
- Page 79 and 80: Capture documentation appropriate t
- Page 81 and 82: Different types of disruptions requ
- Page 83 and 84: 9.3.2.1 Perform System Backup Back
- Page 85 and 86: 11. Personnel Security These Person
- Page 87 and 88: 12. Secure Purchasing/Acquisition N
- Page 89 and 90: Table of Contents Introduction ....
- Page 91 and 92: Introduction This Mandatory Baselin
- Page 93 and 94: 2.1.2.c Information Protection •
- Page 95 and 96: o Appropriate physical security mea
- Page 97 and 98: 4. Access Control These Assessment
- Page 99 and 100: 5. Systems Configuration These Syst
- Page 101 and 102: 5.3.1.c Media Disposal Methods •
- Page 103 and 104: 6.4. Maintain Records Agencies must
- Page 105 and 106: 8. Incident Response These Incident
- Page 107 and 108: 9.1.1.c Contingency Plan Update Fre
- Page 109: Mandatory Baselines • Systems man
- Page 113 and 114: • Data is to be used for its inte
- Page 115 and 116: State of Kansas Non-Mandatory Proce
- Page 117 and 118: 6.3. Maintenance Operations .......
- Page 119 and 120: Introduction This Non-Mandatory Pro
- Page 121 and 122: 2.1.1.4 Likelihood Determination Es
- Page 123 and 124: 2.2.1.5 Establish Appropriate Secur
- Page 125 and 126: 4. Access Control These Assessment
- Page 127 and 128: 4.3. Session Management The followi
- Page 129 and 130: 4.3.2.2 Restrict Intra and Inter-Sy
- Page 131 and 132: 5.1.1.3 Actively Maintain Inventory
- Page 133 and 134: 5.1.3.3 Provide Implementation Docu
- Page 135 and 136: • Place all media in a locked con
- Page 137 and 138: 6. Systems Operation These Systems
- Page 139 and 140: 6.2. Integrity Operations The follo
- Page 141 and 142: 6.3.2. Perform Patch and Vulnerabil
- Page 143 and 144: 6.4. Maintain Records Agencies shou
- Page 145 and 146: 7.1.1.3 Require Authenticated Acces
- Page 147 and 148: 8. Incident Response These Incident
- Page 149 and 150: 8.1.2.2 Develop Supporting Strategi
- Page 151 and 152: 9. Contingency Planning No applicab
- Page 153 and 154: 10.1.1.2 Implement Physical Access
- Page 155 and 156: 11. Personnel Security These Person
- Page 157 and 158: • Review created accounts and ass
- Page 159 and 160: 11.2.4.3 Recover all Organizational
Monthly backups will be retained for 12 months, weekly<br />
backups will be retained for 5 weeks and daily backups will be<br />
retained for 7 days.<br />
• Those systems not deemed as critical by the organization will<br />
be fully backed up on a monthly basis and incrementally or<br />
differentially backed up on weekly basis. Monthly backups will<br />
be retained for 6 months and weekly backups will be retained<br />
for 2 weeks.<br />
9.4. Maintain Records<br />
Capture documentation appropriate to all contingency planning standards:<br />
• Document and retain copies <strong>of</strong> contingency roles, responsibilities, assigned<br />
individuals and appropriate contact information.<br />
• Document and retain copies <strong>of</strong> contingency training materials.<br />
• Document and retain copies <strong>of</strong> the contingency plan, including preparatory<br />
materials (i.e. Business Impact Analysis output).<br />
• Document and retain copies <strong>of</strong> completed contingency tests.<br />
Mandatory Baselines<br />
Page 20 <strong>of</strong> 25
Change language