4.2.1 The relevant entities shall maintain backup copies of data and provide sufficient available …

Requirement

The relevant entities shall maintain backup copies of data and provide sufficient available resources, including facilities, network and information systems and staff, to ensure an appropriate level of redundancy.

Guidance

• Consider whether to invest in own redundancy or to engage third parties, for example cloud providers, to provide such redundancy, in alignment with the BIA (Annex to the regulation, point 4.1.3).

Examples of evidence

• Backups are physically separated from the systems that generated them.
• If the service is offered by a third party, SLAs.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• ENISA -