rephrase "the organization is required to keep audit records until it is confirmed the audit records are no longer necessary for administrative, legal, auditing, or other functional needs. Information backups on distinct physical systems or components must be safeguarded and frequency to back up audit records in accordance with the system backup processes outlined in the Contingency Plan, system administrators will verify and test the retrieval of audit records before restoring backup of information systems.