NIST 800-53 Rev. 5

SC-28(2): Protection of Information at Rest | Offline Storage

Control Text:

Remove the following information from online storage and store offline in a secure location: [Assignment: organization-defined information].

Removing organizational information from online storage to offline storage eliminates the possibility of individuals gaining unauthorized access to the information through a network. Therefore, organizations may choose to move information to offline storage in lieu of protecting such information in online storage.

Related Controls

  • None