Subcontrol 10.2 - Githubissues

adammontville / cis-controls-71-measures

0 stars 0 forks source link

Subcontrol 10.2 #17

Open adammontville opened 5 years ago

adammontville commented 5 years ago

Ensure that each of the organization's key systems are backed up as a complete system, through processes such as imaging, to enable the quick recovery of an entire system.

Measures

M1 = # of backed system / # of total system
M2 = (SUM i to N (backUpSize_i / total_capacity_i)) / N

Metrics/KEI

Efficiency of backup = M1 * M2

Backup software is installed
Backup software is appropriately configured
Backups have run

wmunyan commented 5 years ago

Inputs:

The list of "key systems" identified by the organization
The organization's backup/imaging configuration policy

Assumptions:

Backup software (either OS or 3d party) is installed and appropriately configured on "key systems" identified in Input 1

Operations:

Compare each "key system"'s backup configuration with available configuration policy.

Measures:

M1 = 1 if "key system" backup configuration policy meets policy requirements
M2 = The total number of endpoints defined as "key systems"

Metrics:

Coverage Ratio: (SUM of M1 from 1..M2) / M2