PDP-1 Backup plan

What is PDP-1 Backup Plan Control about?

A data backup plan is the process of evaluating what data will be backed up, identifying the tools and techniques for backing up the data and defining the frequency and recovery of the backups. It is important to implement a backup strategy to offset the risks of potential data loss.

Available tools in the marketplace

Tools:

No tool recommendation is made for this section

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version:

• TrustCloud backup plan template
• Data backup template from National CyberSecurity
• Backup best practices from NIST

Control implementation

NOTE: This control is 100% automated by TrustCloud. Connect your system to enjoy the benefits of automation.

To implement this control manually,

1. Document a process to back up data. Configure the defined backup schedule on the relevant system.

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

1. Provide the backup strategy document.
2. Provide a screenshot of the backup schedule.

Evidence example

For the suggested action, an example is provided below:

1. Provide the backup strategy document.
   Your data backup policy should include a similar table:
   
2. Provide a screenshot of the backup schedule.
   The following screenshot shows evidence demonstrating a backup schedule. Provide something similar showing the frequency of the backups.
   Google search