+CON.3.A14 Protection of Backups [IT Operation Department] (B)

CON.3.A14 Protection of Backups [IT Operation Department] (B)

Created backups MUST be suitably protected against unauthorised access. In particular, it MUST be ensured that backups cannot be overwritten intentionally or unintentionally. IT systems used for data protection SHOULD only allow write access to backup storage media for authorised backup or administrative activities. Alternatively, backup media SHOULD only be connected to the corresponding IT systems for authorised backups or authorised administrative activities.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.16 Theft of Devices, Storage Media and Documents
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.45 Data Loss