PDP-1 Backup plan

What is this control about?

A data backup plan is the process of evaluating what data will be backed up, identifying the tools and techniques for backing up the data, and defining the frequency and recovery of the backups. It is important to implement a backup strategy to offset the risks of a potential data loss.

Available tools in the marketplace

Available templates

TrustCloud has a curated list of templates internally or externally sourced to help you get started. Click on the link for a downloadable version:

• TrustCloud backup plan template
• Data backup template from National CyberSecurity
• Backup best practices from NIST

Control implementation

Note: This control is 100% automated by TrustCloud. Connect your system to enjoy the benefit of automation

For a manual implementation: 

Document a process to back up data.  Configure the defined backup schedule on the relevant system

What evidence do auditors look for?

Most auditors, at a minimum are looking for the below suggested action:

• Provide the backup strategy document
• Provide a screenshot of the backup schedule

Evidence example

From the suggested action above, an example is provided below.

1. Provide the backup strategy document.

Within your data backup policy, include a similar table:

2. Provide a screenshot of the backup schedule.

Evidence demonstrating a backup schedule. Provide something similar showing the frequency of the backups.

Google search