5.6.2.1
Backup and Encrypt Data
Determine the Essential Information for Functioning of the Organization
Backup and Encrypt Data – Determine the Essential Information for Functioning of the Organization – Organizations shall determine on a case-by-case basis what business information and software (including but not limited to sensitive information) is essential to the functioning of the organization, and
how frequently this information changes.
NOTE: As an example, critical workstations and servers may require daily incremental backups, whereas desktops may be recovered from one common image.
-
5.12 Classification of Information: Classify information based on organization’s security needs: confidentiality, integrity, availability, and relevant stakeholder requirements.
5.13 Labelling of Information: Develop and implement information labelling procedures based on organization’s classification scheme.
5.33 Protection of Records: Safeguard records against loss, destruction, falsification, unauthorized access, and release.
5.37 Documented Operating Procedures: Document and provide operating procedures for information processing facilities to relevant personnel.
8.12 Data Leakage Prevention: Apply data leakage prevention measures to systems, networks, and other devices handling sensitive information.
8.13 Information Backup: Maintain and regularly test backup copies of information, software, and systems as per the agreed topic-specific backup policy.
-
3.8.9 Protect the confidentiality of backup CUI at storage locations.
-
3.8.9 Protect the confidentiality of backup CUI at storage locations.