Requirement:

The asset owner shall have policies and procedures around handling and storing backup media in a safe and secure manner to ensure its integrity, authenticity and availability when needed and the confidentiality of the data is maintained.

Guidance: