unified
UC-BCDR-03 — Back up data and verify restorability
Back up information, software, and system images at a frequency and scope aligned to defined recovery point objectives, protect backup copies from unauthorized access and modification, and keep copies separate from the primary environment. Verify backup integrity and restorability through periodic test restores, and verify the integrity of backups before using them for restoration.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Business Continuity & Disaster Recovery
- type
- corrective
- category
- technical
Details
- unified_id
- UC-BCDR-03
- title
- Back up data and verify restorability
- statement
- Back up information, software, and system images at a frequency and scope aligned to defined recovery point objectives, protect backup copies from unauthorized access and modification, and keep copies separate from the primary environment. Verify backup integrity and restorability through periodic test restores, and verify the integrity of backups before using them for restoration.
- domain
- Business Continuity & Disaster Recovery
- control_type
- corrective
- control_category
- technical
- members
- framework
- nist-800-53
- control_id
- CP-9
- coverage
- full
- relationship
- superset_of
- framework
- nist-csf-2
- control_id
- RC.RP-03
- coverage
- full
- relationship
- superset_of
- framework
- iso-27001
- control_id
- A.8.13
- coverage
- full
- relationship
- superset_of
- framework
- soc2
- control_id
- A1.2
- coverage
- partial
- delta
- environmental protections and recovery-infrastructure operation satisfied by companion controls
- relationship
- intersects_with
- framework
- nist-csf-2
- control_id
- PR.DS-11
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-BCDR-03 — Back up data and verify restorability maps_to A.8.13 — Information backup
- framework
- iso-27001
- control_id
- A.8.13
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2022
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-BCDR-03 — Back up data and verify restorability mitigates Hardware and equipment failure
- strength
- related
- rationale
- restorable backups recover data lost to storage/disk failure
- UC-BCDR-03 — Back up data and verify restorability mitigates Single-site / single-region / single-supply concentration
- strength
- related
- rationale
- keeping copies separate from the primary environment mitigates backup-facility concentration
- SOX ITGC Testing tests UC-BCDR-03 — Back up data and verify restorability
- Backup & Recovery Testing operates UC-BCDR-03 — Back up data and verify restorability
- UC-BCDR-03 — Back up data and verify restorability mitigates Aging hardware with no periodic replacement scheme
- strength
- related
- rationale
- backups recover data from correlated same-batch disk failures
- UC-BCDR-03 — Back up data and verify restorability maps_to RC.RP-03 — Incident Recovery Plan Execution: The integrity of backups and other restoration assets is verified before using them for restoration
- framework
- nist-csf-2
- control_id
- RC.RP-03
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2.0
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-BCDR-03 — Back up data and verify restorability maps_to A1.2 — The entity authorizes, designs, develops or acquires, implements, operates, approves, maintains, and monitors environmental protections, software, data back-up processes, and recovery infrastructure to meet its objectives.
- framework
- soc2
- control_id
- A1.2
- coverage
- partial
- delta
- environmental protections and recovery-infrastructure operation satisfied by companion controls
- relationship
- intersects_with
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-BCDR-03 — Back up data and verify restorability mitigates Ransomware disrupting operations and data availability
- strength
- primary
- rationale
- backups kept separate and protected from modification, integrity-verified before use, enable clean restore after ransomware encryption
- Business Continuity & DR Test Exercise operates UC-BCDR-03 — Back up data and verify restorability
- ISO 27001 Stage 2 Annex A Controls Audit tests UC-BCDR-03 — Back up data and verify restorability
- UC-BCDR-03 — Back up data and verify restorability maps_to PR.DS-11 — Data Security: Backups of data are created, protected, maintained, and tested
- framework
- nist-csf-2
- control_id
- PR.DS-11
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2.0
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-BCDR-03 — Back up data and verify restorability mitigates Physical damage to assets from disaster, terrorism or vandalism
- strength
- related
- rationale
- off-primary backup copies survive a disaster that destroys the primary site
- SOC 2 Availability Assessment tests UC-BCDR-03 — Back up data and verify restorability
- UC-BCDR-03 — Back up data and verify restorability maps_to CP-9 — System Backup
- framework
- nist-800-53
- control_id
- CP-9
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- SOC 2 Type II Interim Testing tests UC-BCDR-03 — Back up data and verify restorability
- UC-BCDR-03 — Back up data and verify restorability mitigates IT resilience failure — unplanned outage, data loss, slow recovery
- strength
- primary
- rationale
- RPO-aligned backups with verified test restores directly limit data loss and recovery time