Data Backup Plan

The backup of important information is often the last line of defense in the event of either accidental or malicious loss or modification of the Company's information, applications, and infrastructure configurations. The purpose of this standard is to set out the baseline requirements for the backup of Company information systems and data.

Company information must be backed up on a regular basis, protected from unauthorized access or modification during storage, and available for recovery in a timely manner. As backup media may contain sensitive information in high volumes, (i.e., Company's financial transactions, client data, Personal Identifiable Information etc.) the backup media must be protected, during the entire information lifecycle.

The purpose of this standard is to set out for your Company all their Information Communication Technology systems and end-user computing devices, including non-production systems, that contain information that would impact [Company Name], or its clients, in the event data was lost. This standard does not cover data availability using replication techniques, such as database synchronization between production and disaster recovery facilities or data deduplication.

Nowadays, with the digitalization of our society, the need for data protection became more important. The latest IT Security Standards involve the application of technology to broader social and institutional contexts, and thereby contributes to the servitization of companies, and affects how they compete and interact. This document contains security technology solutions to protect data classified as “Highly Sensitive”, “Sensitive”, “Private” or “Public” as per the Data Classification Standard and Data Handling Guidelines. Specifically: