This policy defines the backup policy for computers within the organization which are expected to have their data backed up. A good backup policy starts with a clear objective:
a. The Company’s Data Backup is the responsibility of the relevant user, department
Supervisor, who must define which data/information are to be backed up and must be updated on a regular basis. b. All backed-up data/information should be stored locally on a backup media. For backing up your backups daily, an external NAS drive works quite well. One should never have only one copy of anything, including your backup. Multiple backups add to our protection. A NAS drive permits you to back up your backup. You can plug an external USB drive and back everything up on it. Taking this step is essential if you use the NAS drive to store shared media that is unavailable on your local PCs, but it's a good thing to do even if you're simply backing up the backup. We can use different backup programs and media to cover ourselves in interchangeable ways. For instance, we might back up to an external hard drive on one day and over the Internet via a service on the next day. Get in the backup habit, and you'll be glad you did. Avoid backing up, and you'll eventually regret it. 2.0 Purpose This policy is designed to protect data in the organization to be sure it is not lost and can be recovered in the event of an equipment failure, intentional destruction of data, or disaster. Backups have two distinct purposes. 1. The primary purpose is to recover data as a reaction to data loss, be it by data deletion or corrupted data. 2. The secondary purpose of backups is to recover data from a historical period of time within the constraints of a user-defined data retention policy, typically configured within a backup application for how long copies of data are required. 3.0 Scope This policy applies to all equipment, processed-data and data owned and operated by the organization. 4.0 Definitions 1. 2. 3. Backup - The saving of files onto offline mass storage media for the purpose of preventing loss of data in the event of equipment failure or destruction. Archive - The saving of old or unused files onto offline mass storage media for the purpose of releasing on-line storage room. Restore - The process of bringing off line storage data back from the offline media and putting it on an online storage system such as a file server.
5.0 Timing Daily regular backups are performed in the production area where all output data from each phases of the standard production process are saved. All output or final processed-data are backed up weekly on the designated repository. 6.0 Monthly Backups Monthly backup shall be made in the Admin and Accounting department. 7.0 Responsibility The technician shall be the one responsible to perform regular backups. The delegated person shall develop a procedure for testing backups and test the ability to restore data from backups on a monthly basis. 8.0 Testing The ability to restore data from backups shall be tested at least once per month. 9.0 Data Backed Up Data to be backed up include the following information: 1. Processed-data stored in the hard drive. User Data stored in the Admin (HR, Accounting, Invoicing) Data stored on the Repository hard drive. System data Applications
Systems to be backed up include but are not limited to:
1. SQL File server 2. Mail server – (Main2)
3. 4. Production web server Production database server
10.0 Archives Archives are made at the end of every year in December. User account data associated with the file and mail servers are archived one month after they have left the organization. 11.0 Restoration Users that need files restored must submit a request to the help desk. Include information about the file creation date, the name of the file, the last time it was changed, and the date and time it was deleted or destroyed. 12.0 Storage Locations Media storage used for backup shall be stored in a safe area, a place where it will not be prone to shock or breakages.