3. Backup
Do you have a process or vendor agreement(s) to ensure data backup and recovery systems are in place for UBC Systems under your control?
Control or Process Description
Every UBC System under my control has either
(i) an internal process in place or
(ii) a third-party agreement(s) executed to ensure that its data is backed up.
Why is this Essential?
Backups are an essential disaster recovery measure. Many events including including human error, hardware failure, software failure, malware, cyber attack, power failure, natural disasters, etc. can cause loss of date/systems.
This is a safeguard to prevent data loss should any of these events occur and there is not other way to restore data/systems.
Reference Links
Policy SC14 - Acceptable Use and Security of UBC Electronic Information and SystemsInformation Security Standards – U7 – Securing Computing and Mobile Storage Devices/Media
Privacy Matters @UBC – Back up my data
Backups - Information Security Guideline
Instructions
N/A
What is Acceptable?
All systems managed by UBC IT have a written Service Level Commitment (SLC) covering backup requirements.
Cloud service agreement or contracts have been reviewed to ensure appropriate backup and recovery measures are in place. If self-managed, backups are run and tested.