Verify Backups are Good

中レベル 1手動レビューoceanbase

説明

Backups should be validated on a regular basis.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Review evidence that backup validation is performed systematically: - Examine backup validation or recovery test reports from the past 12 months (or per organizational policy). These may include: o Test plans and execution records from OceanBase Control Platform (OCP) recovery sampling tasks; o Screenshots, logs, or audit trails showing successful restore operations; o Post-test summaries confirming data consistency and application functionality. - If OCP is used, confirm that recovery sampling tasks are configured and have executed successfully within the review period.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Establish a formal backup validation program: - Implement regular recovery sampling tasks via OceanBase Cloud Platform (OCP), scheduled at intervals aligned with business risk (e.g., quarterly for critical systems). - Ensure each test includes: o Restoration of a representative tenant or dataset; o Verification of data completeness and consistency; o Validation that applications can operate correctly on the restored data.

プロパティ

オペレーティングシステム: すべて
タグ: oceanbasebackup
参照: CIS OceanBase Enterprise Edition V4 Benchmark v1.0.0 - 3.1.5 Verify Backups are Good