CP-9 (b) Additional FedRAMP Requirements and Guidance:
Requirement: The service provider maintains at least three backup copies of system-level information (at least one of which is available online).
Conducts backups of information system documentation including security-related documentation [FedRAMP Assignment: daily incremental; weekly full ]; and
CP-9 (c) Additional FedRAMP Requirements and Guidance:
Requirement: The service provider maintains at least three backup copies of information system documentation including security information (at least one of which is available online).
Protects the confidentiality, integrity, and availability of backup information at storage locations.
