An organization must maintain both production and sandbox tenants of Identity Security Cloud.

The statement correctly describes the relevant Configuration Hub capability, although current SailPoint terminology generally refers to configuration backups, configuration files, and drafts rather than simply "templates." Configuration Hub is specifically designed to manage supported Identity Security Cloud configuration objects through backup, comparison, migration, and deployment operations.

An administrator can back up configuration objects from one tenant, establish a tenant connection, prepare a deployment draft, and migrate configurations into another tenant. This directly supports maintaining consistency between environments such as sandbox/staging and production. SailPoint explicitly documents deploying backups from one connected tenant to another.

Configuration Hub also supports exported sp-config JSON configuration files. Those files can subsequently be uploaded and used to migrate configurations between tenants, including tenants in different domains or regions where supported.

For recovery, Configuration Hub can restore supported configurations from previous automated or manual backups by preparing and deploying a draft. It is a configuration-management mechanism rather than a full business-data backup system.

Study Guide Reference: Platform — Configuration Hub, Configuration Backups, Tenant Connections, Configuration Files and Cross-Tenant Deployment.

===============