Home / Rules / Essential Eight Maturity Model / Essential Eight, Regular backups, ISM-1707 (Maturity Level Two)
Essential Eight, Regular backups, ISM-1707 (Maturity Level Two)
Privileged user accounts (excluding backup administrator accounts) are prevented from modifying and deleting backups. Required at Maturity Levels Two and Three of the Regular backups mitigation strategy (Appendices B and C); ISM control ISM-1707 in ASD's Essential Eight to ISM mapping (December 2023).
Steps that cite it
- KC-04 S7 Which Essential Eight control failed?
Evidence commonly asked for
- Permissions preventing privileged accounts other than backup administrators modifying or deleting backups
- Dated record of an assessor's attempt to defeat the setting, with the outcome
Accepted citation forms are listed on the answer format page.