Subcontrol 10.1 - Githubissues

adammontville / cis-controls-71-measures

0 stars 0 forks source link

Subcontrol 10.1 #16

Open adammontville opened 5 years ago

adammontville commented 5 years ago

Ensure that all system data is automatically backed up on regular basis.

Measures

Ti: backup time at time i , and M is number of servers

Metrics/KEI

Sum_j=1 to M (Sum_i=1 to N (Ti - Ti-1) / N)/M, where Ti is update at time i

Backup software is installed
Backup software is appropriately configured
Backups have run

wmunyan commented 5 years ago

Inputs:

Backup configuration policy is available
Backup software (either OS or 3d party) configuration is available and queryable
Backup software logs are available and queryable
Successful backup "staleness" threshold is defined (a maximum time period allowed between backups)

Operations:

Compare an endpoints backup configuration with available configuration policy
Interrogate logs to determine most recent successful backup completion time

Measures:

M1 = 1 if endpoint backup configuration policy meets policy requirements
M2 = 1 if last successful backup is within the "staleness" threshold
M3 = Total number of endpoints

Metrics:

Coverage Ratio = (SUM from 1..M3 (M1 AND M2)) / M3