Categories Topics
Description
Information Backup and Restoration

Overview
Information (to include tape) backup and restoration is the process to ensure system and application availability by backing up key information onto physical or tape media in the event information may need to be restored after a disaster or unintended errors.

Guidelines
Organizations should have a process to backup and restore data in the event the primary facility is unavailable (due to disaster), system/data is unavailable, deleted or changed due to unauthorized access or error.

Backup and restore process can be performed from a number of technology solutions to include:
  • Tape library/backup
  • On-line backup storage array
  • and redundant/backup storage facility to name a few.
The data restore process should also be tested consistently and at least annually. Tape backups and archives of sensitive information should also be encrypted and access restricted to authorized roles (e.g. tape operator). Media backups should also be stored in a secure location, preferably off-site facility, such as backup site or a commercial facility. The backup facility should also be reviewed for security at least annually. Secure transport (such as armored vehicle with guards) to an offsite location would reduce the likelihood of sensitive information stored on media being lost or stolen for malicious intent.

Topic Category
Operations and Communications Management
 
News Articles
Ransomware Attack Strikes Pennsylvania Senate Democratic Caucuswww.tripwire.com3/6/2017
Security lapse exposed New York airport's critical servers for a yearwww.zdnet.com2/24/2017
Ransomware Attack Causes County to Shut Down IT Systemwww.tripwire.com2/3/2017
GitLab database goes out after spam attackwww.infoworld.com2/1/2017
Police Department Loses Digital Evidence Dating Back to 2009 in Ransomware Attackwww.tripwire.com1/27/2017
Ransomware Attack Leads LA School to Fork Over $28K in Ransomwww.tripwire.com1/10/2017
iOS 10.2 will make your local iPhone backup much much harder to crackwww.tripwire.com11/9/2016
48% of UK businesses fail to back up company data at least once a daywww.scmagazine.com6/8/2016
EMC beefs up data protection portfoliowww.zdnet.com7/10/2013
Baby got .BAT: Old-school malware terrifies Iran with del *.*www.theregister.co.uk12/19/2012
Hospital agrees to pay $750,000 over data breach allegationswww.scmagazine.com5/25/2012
Policies
Information Backup and Restoration Policy