Find Resources & Connect with members on topics that interest you.

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

Please sign in to see your topics.

You must be logged in to join this group.

DS4.9 - Offsite Backup Storage

This topic is intended to enable collaboration and sharing of information to facilitate a better understanding and approach to implementing this COBIT control objective based on the risk, value and guidance provided by its corresponding control practices.

COBIT Control Objective DS4.9 - Offsite Backup Storage is contained within Process Popup Ensure Continuous Service.

Learn more about COBIT and related publications.

Click “Join This Community” to be able to actively participate in discussions and contribute content. You must be an ISACA member to join this topic. Join ISACA now.

 
This Topic Has:
14 Members
0 Online
4515 Visits

 Recent Discussions

Community Leader

Knowledge Center Manager

Knowledge Center Manager

Title: Become a Topic Leader!

Badge: Energizer


Offsite Backup Storage

Store offsite all critical backup media, documentation and other IT resources necessary for IT recovery and business continuity plans. Determine the content of backup storage in collaboration between business process owners and IT personnel. Management of the offsite storage facility should respond to the data classification policy and the enterprise’s media storage practices. IT management should ensure that offsite arrangements are periodically assessed, at least annually, for content, environmental protection and security. Ensure compatibility of hardware and software to restore archived data, and periodically test and refresh archived data.

View value and Risk Drivers  help

Hide value and Risk Drivers help


Value Drivers

  • Availability of backup data in the event of physical destruction of hardware
  • Offsite data consistently managed throughout the organisation
  • Appropriate protection of offsite storage
  Risk Drivers
  • Unavailability of backup data and media due to missing documentation in offsite storage
  • Loss of data due to disaster
  • Accidental destruction of backup data
  • Inability to locate backup tapes when needed

View Control Practices  help

Hide Control Practices  help

  1. Provide protection for data commensurate with the value and security classification, from the time they are taken offsite, while in transport to/from the organisation and at the storage location.
  2. Ensure that the backup facilities are not subject to the same risks (e.g., geography, weather, key service provider) as the primary site.
  3. Perform regular testing of:
    • The quality of the backups and media
    • The ability to meet the committed recovery time frame
  4. Ensure that the backups contain all data, programs and associated resources needed for recovery according to plan.
  5. Provide sufficient recovery instructions and adequate labelling of backup media.
  6. Maintain an inventory of all backups and backup media. Ensure inclusion of all departmental processing, if applicable.

Discussions: 0 total

Must be a Topic member to contribute

No Results Found

Documents & Publications: 68 total

Must be a Topic member to contribute
View All »
Books
Posted by ISACA 318 days ago
Books
Posted by ISACA 584 days ago
Books
Posted by ISACA 647 days ago

Events & Online Learning: 18 total

16 Mar 2015
ISACA International Event
Orlando, FL, USA
15 Jun 2015
ISACA International Event
Ciudad de México, Mexico
21 Sep 2015
ISACA International Event
Miami, FL, USA
21 Sep 2015
ISACA International Event
06010 Mexico City, Panama
La Conferencia Latinoamericana CACS/ISRM

Journal Articles: 147 total

Volume 4, 2107
by Larry G. Wlosinski, CISA, CRISC, CISM, CAP, CBCP, CCSP, CDP, CIPM, CISSP, ITIL v3, PMP
The root causes of privacy incidents include the outsourcing of data, malicious insiders, system glitches, cyberattacks, and the failure to shred or dispose of privacy data properly.
Volume 3, 2107
by Jayakumar Sundaram, CISA, ISO 27001 LA
The SoA is a continuously updated and controlled document that provides an overview of information security implementation.
Volume 4, 2017
by Joshua J. Filzen, Ph.D., CPA and Mark G. Simkin, Ph.D.
Attachments are popular in several accounting contexts. Many of the same file types that can be attached to emails can also be attached to the records in databases.
Volume 4, 2017
by Rassoul Ghaznavi-Zadeh, CISM, COBIT Foundation, SABSA, TOGAF
Traditionally, security architecture consists of some preventive, detective and corrective controls that are implemented to protect the enterprise infrastructure and applications.
Volume 3, 2017
by Guy Pearce
The relationship between cyber security and the regulatory requirements for data governance, data stewardship and enterprise data management is set to strengthen.
Volume 3, 2017
by Indrajit Atluri, CRISC, CISM, CEH, CISSP, CSSLP, HCISPP, ITILv3
The resolve to address IoT device security at various levels—hardware and software, government and enterprise, consumers and services—is widespread.

Wikis: 2 total

Blog Posts: 33 total

Few days ago the person behind the Hacking Team hack revealed how he did it in pastebin - (the original in Spanish) https://pastebin.com/raw/GPSHF04A I was very keen to understand how good you need to be to hack back one of the most (in)famous hacki...
Posted By : TiagoRosado | 0 comments
Senior Manager           ultimate responsibility Information security Officer          functional responsibility Security Analyst           Strategic, develops policies and guidelines Owner         - Responsible for asset         - Determine level of clas...
Posted By : Muhammad554 | 0 comments
“Enterprise architecture is now a strategic componentof every forward-thinking organization around the world.”Source: http://feapo.org/press-release-ea-perspectives-white-paper/ Related Article: Common Perspective on Enterprise Architecture: http://feapo....
Posted By : SA | 1 comments
Let us have positive inspirational slogans for every situation. Last week I started the project meeting like this: I don't know you are all so good at tuning the website. The performance is now is wonderful. I could witness reduction of stress, anxiety an...
Posted By : Jayakumar Sundaram | 1 comments
Yesterday’s security technology will not keep your network safe today, nor will today’s solutions protect you tomorrow. Network security must evolve. And at a rate that keeps it always one step ahead of the threats. These could include factors such as you...
Posted By : rasoolirfan | 1 comments
During an audit you may find that shell scripts are used to connect to your Oracle database (these are often scheduled jobs).  In many instances this represents a security risk as the Oracle database password is hardcoded into the script.  This means th...
Posted By : Ian Cooke | 1 comments