BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

CP-09(08) Cryptographic Protection

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged CP Moderate baselineHigh baseline part of CP-9

Title

Cryptographic Protection

Control

Implement cryptographic mechanisms to prevent unauthorized disclosure and modification of [Assignment: backup information].

Discussion

The selection of cryptographic mechanisms is based on the need to protect the confidentiality and integrity of backup information. The strength of mechanisms selected is commensurate with the security category or classification of the information. Cryptographic protection applies to system backup information in storage at both primary and alternate locations. Organizations that implement cryptographic mechanisms to protect information at rest also consider cryptographic key management solutions.

Parameters

cp-09.08_odp: backup information

Related controls

sc-12, sc-13, sc-28

Assessment objective

CP-09(08) cryptographic mechanisms are implemented to prevent unauthorized disclosure and modification of [Assignment: backup information].

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).