+CON.3.A6 Developing a Backup Concept [Process Owner, IT Operation Department] (S)

CON.3.A6 Developing a Backup Concept [Process Owner, IT Operation Department] (S)

An organisation SHOULD prepare a backup concept that includes at least the following points:

  • Definitions of essential aspects of backups (e.g. different types of backup procedures)
  • Threat landscape
  • Factors influencing each IT system or group of IT systems
  • Backup plans for each IT system or group of IT systems
  • Relevant findings from business continuity management, in particular the recovery point objective (RPO) for each IT system or group of IT systems.

The IT Operation Department SHOULD coordinate the backup concept with the Process Owners responsible for the applications affected. If a central backup system is used, it SHOULD be noted that there may be a higher need for protection due to the concentration of data. Backups SHOULD be carried out regularly in line with the backup concept.

The backup concept itself SHOULD also be included in backups. The technical information contained in the backup concept to restore systems and backups (backup plans) SHOULD be backed up in such a way that it will be available even if the backup systems themselves fail.

Employees SHOULD be informed about the parts of the backup concept that concerns them. The proper implementation of the backup concept SHOULD be checked regularly.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation