+CON.3.A2 Establishment of Backup Procedures [Process Owner, IT Operation Department] (B)

CON.3.A2 Establishment of Backup Procedures [Process Owner, IT Operation Department] (B)

The IT Operation Department MUST determine the procedure for how data is to be backed up.

A backup procedure MUST define the type, frequency, and times of backups. This MUST be based on the parameters that have been determined and involve the Process Owners of the respective applications. The storage media to be used and the manner in which they are to be transported and stored MUST also be defined. Backups MUST always be stored on separate storage media. Backup storage media requiring particular protection SHOULD only be connected to the respective organisation's network or the source system during backup and restoration procedures.

For virtual environments and storage systems, checks SHOULD be carried out on whether the IT system at hand can be additionally backed up by snapshot mechanisms in order to create several quickly recoverable intermediate versions between the complete backups.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.39 Malware