This sample policy specifies the procedures for backing up data and facilitating the recovery of important data in the event of accidental or intentional corruption, loss or destruction. This policy applies to all employees who create data on their personal systems and all data owners whose data is maintained on a central shared system.
The procedures state that data must be backed up and stored locally in a protected location on a regular basis. For data critical to the ongoing operation of the business, a copy of the current backup data must be made at the end of each backup process and shipped to a designated offsite storage location.
Risk & Control Matrices - RCMs
Define IT Strategy and Organization RCM
System Backup Review Audit Work Program
Policies & Procedures