Skip to content

Data Backup

What is Data Backup?

The process of creating copies of data that can be used to restore the original in the event of data loss, corruption, or disaster.

Information Security

Each of these is named in at least one of the same controls as data backup. The number is how many controls name both.

What the standards actually require on data backup

Requirements naming data backup across 6 standards, quoted from the control text.

C5 (Germany)4 controls

Watch backup execution through technical and organisational measures and have qualified staff investigate and rectify malfunctions promptly, so the agreed scope, frequency and retention of data backup are still achieved.

C5-OPS-07 · Data Backup and Recovery - Monitoring

Create a retrievable, exact copy of ePHI when needed before movement of equipment. NIST recommends pre-move backup verification and secure transport for media.

164.310(d)(2)(iv) · Data Backup and Storage (Addressable)

Create a retrievable, exact copy of ePHI when needed before movement of equipment. NIST recommends pre-move backup verification and secure transport for media.

164.310(d)(2)(iv) · Data Backup and Storage (Addressable)

Data backup processes, and supporting data backup procedures, are developed, implemented and maintained.

ISM-1547 · Data backup processes, and supporting data backup procedures, are developed, implemented a

A backup concept covering protection needs, frequency, retention, encryption, offsite storage and restoration testing shall be implemented.

CON.3 · Data Backup Concept

Data backup and recovery in cloud. Control from NIST SP 800-190 framework, domain: NIST SP 800-190: Data Protection in Cloud.

NIST190-14 · Data backup and recovery in cloud

Questions people ask about data backup

What is Data Backup?
The process of creating copies of data that can be used to restore the original in the event of data loss, corruption, or disaster.
Why is Data Backup important for compliance?
Data Backup is a key concept in Information Security. Understanding data backup helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Data Backup?
Data Backup appears in the requirement text of C5 (Germany), HIPAA Security Rule, NIST SP 800-66 Rev 2, Australian Information Security Manual, BSI IT-Grundschutz. Across these standards we have identified 11 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Data Backup?
Explore our compliance framework pages to see how data backup applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Data Backup applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.