1/25/2024 0 Comments Data backup policy example![]() I’ve been in information security now for over 20 years and with all the changes that have come there are still only a handful of things that we recommend that people do, not matter what. It doesn’t really become a problem until the fateful day comes when you do lose the data and suddenly your entire world collapses. The question that we always ask ourselves is – what if I lost this data? In our personal lives we’re creating data daily in photographs and posts and emails and then in business we have all that valuable customer data, intellectual property coma even the emails and communications that we send.Įvery piece of data that we have has a value. I think it’s fair to say that data is our most important asset. In the process documents and in the processes we ensure that the backups are tested regularly to ensure they are effective. Backups are encrypted using vendor built in encryption. Backup and restoration procedures are documented, in place and maintained. Information is backed up securely in line with the data retention requirements, business requirements and legal and all legal and regulation legislation requirements including but not limited to the GDPR and Data Protection Act 2018. The purpose of the backup policy is to protect against loss of data. To mitigate that risk we want to encrypt our backup so that if the backup is compromised it is to all intents and purposes, worthless. There are many variables that can present a risk to backup. It maybe that it is held on removable media, offsite, in a remote location. Backup is one of the weakest areas for security control. We want and need the knowledge to be written down so that if when the time comes, if the person that normally performs the backup and restoration is not available we can still recover. Having documented processes enables us to ensure the control is in place and effective. It is important to have documented processes and procedures for backing up and restoring data. Can you accept loosing a weeks worth of data? Based on circumstance, but the more often you can backup, the better. When deciding how often to backup it is a question of how much update and changes can you accept to loose? If you only back up once a week then you potentially have a week of data that will be missing and may need recreating. Backup is not just of data files but consider the backup of system configuration files, virtual machines, databases, websites, photographs – in fact anything that you rely on or would harm you if you no longer had it. We want to know what we are backing up and how often. What is a data backupĭata backup is the process of taking an exact copy of the data at a point in time so that if you need to restore it you can restore it and return to it as it was at that point in time. It sets out the organisations approach to backups and ensures that adequate processes and procedures are in place as well as regular testing of the backup so that we can be sure that when the time comes and if we need it, we can recover it. A backup policy is designed to protect you from the loss of data or the corruption of data due to malware and ransomeware.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |