![]() ![]() You implement whatever solutions are required to fulfil your requirements Source and implement appropriate solution/s You know how much you need to do to meet the requirements (RTO, RPO, resilience, security) already defined You understand what obligations the law, government departments, public bodies and funding bodies may require the Institution to fulfil (including confidentiality, integrity and availability of data backups).Ĭomplete gap analysis between current implementation and requirements You agree what business continuity events are possible and the extent to which you must be able to recover from themĭocument the security requirements your backup solution must comply with You agree how quickly data needs to be restored in the event of a data loss incident You agree how much data loss is acceptable, which may be different for different types of dataĭecide your Recovery Time Objective or Objectives You know the cost of recreating the data, or the financial penalties which may be imposed as a result of data lossĭocument the configuration of your storageĭecide your Recovery Point Objective or Objectives The recommended process for designing a backup solution is as follows Activityĭocument the value of your information assets For example, a fire, flood or facility failure may well cause damage to data including backup media in your server room, so you may decide to mirror data to a second off site location to be able to guarantee the availability of your data in that event. This is the capability of the backup solution to remain functioning in the event of different types of failure or damage. This is a way of expressing the maximum time it would take to recover from the data loss incident, which is primarily the amount of time required to restore the files from whatever backup medium they were stored on. If the RPO is 4 hours, then more frequent mirroring of data would be required throughout the day. For example, if the RPO is 24 hours then a nightly backup would be reasonable, as a successful backup would only ever be up to 24 hours old. The Recovery Point is how many hours or days old the backup can be, and in effect is a way of deciding how much permanent data loss is acceptable. This is a way of expressing the maximum acceptable age of backup which could be restored in the event of a data loss incident. There are two key measures which should be considered when designing a backup solution Data backup is different from archiving, which is the practice of storing data which is no longer required for reference purposes only. The purpose of data backup is purely to allow the Institution to continue its activity after a data loss incident, by retrieving some or all of the data lost, ideally from a point in time backup taken within the last 24 hours. PrinciplesĪll data should be backed up according to its value to the Institution, the cost of recreating the data, any financial costs or penalties which might be incurred as a result of data loss or corruption, and the risk of data loss or corruption. This policy does not address the activity of archiving data (storage in the long term), it only addresses the requirement to backup data in such a way that it can be retrieved in the event that the original copy is lost, corrupted, or damaged in some other way (e.g. The policy covers all data obtained or created as part of Research, Teaching or Administration activities by staff at any of the Institutions within scope. This policy covers all departments, institutes and units in the School of Clinical Medicine at the University of Cambridge, including any transferred to the School, and any cross-School Institutions (e.g. This policy sets out the School’s policy on data backup, stipulating not how backups should be maintained or exactly what data should be backed up, but the process each department should go through to establish an appropriate backup procedure for their data. “Teaching, research and administrative data is stored centrally (not on the desktop hard drive or removable storage), protected against unauthorised access and accidental disclosure, and backed up to a separate storage system to protect against data loss in the event of a system failure” The School Minimum Standard of IT Service states that AV Support for Seminar Rooms and Lecture Theatres.Apply for Early Adoption of OneDrive for Business.
0 Comments
Leave a Reply. |