Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.8.9

Protect Confidentiality of Backups

Official citation: 3.8.9

Class: core · Severity: high

Statement of the obligation — verify against source

3.8.9

What it means

Protect the confidentiality of CUI in your backups at their storage locations — for example by encrypting backup data and securing off-site or cloud backup repositories — so backups don't become an unprotected copy of your sensitive information.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.