Data Backup Procedure – Template 2
The main objective of this procedure is to describe the processes and controls implemented by the Company in order to ensure the availability of its systems and data.
More specifically, this procedure is intended to:
a. Describe the backup activities
b. Describe the conditions under which the backup schedule can be changed
c. Describe the backup testing and restoration testing activities
d. Describe the requirements for the off-site storage of the backup media
e. This document is part of the Information Security Policy of the Company
CONTENT
1. OVERVIEW
1.1 PROCEDURE OWNER
1.2 CLASSIFICATION
1.3 APPLICABLE REGULATIONS
1.4 RELATED [COMPANY] NORMS AND PROCEDURES
1.5 OBJECTIVES
1.6 AUDIENCE AND SCOPE
1.7 DOCUMENT SUPPORT
2. DEFINITIONS & ABBREVIATIONS
3. REQUIREMENTS
3.1 SERVERS COVERED BY THE CURRENT PROCEDURE
3.2 BACKUP SCHEDULE
3.3 BACKUP LOGS AND ALERTS
3.4 BACKUP MEDIA
3.5 STORAGE OF BACKUP MEDIA
3.6 RESTORATION PROCEDURE
3.7 RETENTION PROCEDURE
3.8 DISPOSAL PROCEDURE
4. ROLES AND RESPONSIBILITIES
4.1 NETWORK/SERVER/DATABASE ADMINISTRATOR
4.2 INFORMATION SECURITY TEAM
5. EXCEPTIONS
6. FINAL CONSIDERATIONS
6.1 DISCIPLINARY ACTIONS AGAINST PROCEDURE VIOLATION
6.2 DOCUMENT REVISION
7. APPENDIX A – BACKUP SCHEDULE
8. APPENDIX B – BACKUP RESTORATION TESTING FORM
9. APPENDIX C – SEND-RECEIVE NOTE
Pages: 13
Review Data Backup Procedure – Template 2.