Office of the Inspector General Information System Security Evaluation of Region II - Atlanta, GA
Document key management procedures.
Include the date combinations were last changed in the combination inventory.
Document combination management procedures.
Update documented backup procedures to reflect the actual backup procedures in place.
Develop and implement procedures for sending information system backup information
to an offsite location for storage for at least 14 days or as recommended by the agency.
The offsite storage location should be in a cabinet or safe that is waterproof and fireproof.