CP-9 Additional FedRAMP Requirements and Guidance:
Requirement: The service provider shall determine what elements of the cloud environment require the Information System Backup control. The service provider shall determine how Information System Backup is going to be verified and appropriate periodicity of the check.
Conducts backups of user-level information contained in the information system [FedRAMP Assignment: daily incremental; weekly full]
CP-9 (a) Additional FedRAMP Requirements and Guidance:
Requirement: The service provider maintains at least three backup copies of user-level information (at least one of which is available online).
Conducts backups of system-level information contained in the information system [FedRAMP Assignment: daily incremental; weekly full];
