The container platform must preserve any information necessary to determine the cause of the disruption or failure.

When a failure occurs within the container platform, preserving the state of the container platform and its components, along with other container services, helps to facilitate container platform restart and return to the operational mode of the organization with less disruption to mission essential processes. When preserving state, considerations for preservation of data confidentiality and integrity must be taken into consideration.

Review the container platform configuration to determine if information necessary to determine the cause of a disruption or failure is preserved.

If the information is not preserved, this is a finding.

Configure the container platform to preserve information necessary to determine the cause of the disruption or failure.