Backup and Recovery
What is Backup and Recovery?
The processes and technologies for creating copies of data and systems so they can be restored after data loss, corruption, or disaster. Backup frequency and retention policies are defined by business requirements and regulatory obligations.
Terms that appear alongside backup and recovery
Each of these is named in at least one of the same controls as backup and recovery. The number is how many controls name both.
- data backup 10 shared controls
- operations security 6 shared controls
- data protection 5 shared controls
- ransomware 3 shared controls
- encryption 3 shared controls
- nist 2 shared controls
Frameworks that govern backup and recovery
What the standards actually require on backup and recovery
Requirements naming backup and recovery across 6 standards, quoted from the control text.
Watch backup execution through technical and organisational measures and have qualified staff investigate and rectify malfunctions promptly, so the agreed scope, frequency and retention of data backup are still achieved.
C5-OPS-07 · Data Backup and Recovery - Monitoring →Cybersecurity requirements for backup and recovery management are identified, documented and approved.
saudi-nca-ecc::2-9-1 · 2-9-1 Backup and recovery requirements defined →Protect backup data with encryption, immutability, soft delete, and multi-user authorisation against ransomware and insider threats.
BR-2 · Protect backup and recovery data →Verify that appropriate backup and recovery mechanisms exist for the configuration management system and the controlled items, which may be provided by organizational units outside the project, and initiate measures where they are insufficient.
automotive-spice-aspice-v4-1-process-assessment-model::SUP.8.BP8 · SUP.8.BP8 Verify the availability of backup and recovery mechanisms →The FI should have a system and data backup strategy and plan for regular backups; a policy for the backup data life cycle (frequency, retention, storage mechanisms, secure destruction); periodic restoration tests to validate procedures;
monetary-authority-of-singapore-technology-risk-management-guidelines::8.4 · 8.4 System Backup and Recovery →Data backup and recovery in cloud. Control from NIST SP 800-190 framework, domain: NIST SP 800-190: Data Protection in Cloud.
NIST190-14 · Data backup and recovery in cloud →Questions people ask about backup and recovery
What is Backup and Recovery?
Why is Backup and Recovery important for compliance?
Which compliance frameworks address Backup and Recovery?
Where can I learn more about Backup and Recovery?
See how Backup and Recovery applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.