SC-28.2: Offline Storage

information is removed from online storage;

information is stored offline in a secure location.

System and communications protection policy

procedures addressing the protection of information at rest

system design documentation

system configuration settings and associated documentation

cryptographic mechanisms and associated configuration documentation

offline storage locations for information at rest

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

Mechanisms supporting and/or implementing the removal of information from online storage

mechanisms supporting and/or implementing storage of information offline