When to use this
Use this template to define backup frequency, scope, retention, storage location, protection, and restore testing requirements.
Related controls
- A.8.13 Information Backup
- A.5.30 ICT Readiness for Business Continuity
- A.5.29 Information Security During Disruption
Backup schedule
| Asset/system | Data/software/system scope | Frequency | Retention | Location | Protection | Restore test frequency | Owner |
|---|---|---|---|---|---|---|---|
| TBD | TBD | Real-time/daily/weekly/monthly | TBD | Off-site/cloud/immutable/offline | Encryption/access control | TBD | TBD |
Minimum checks
- Scope includes information, software, systems, configurations, and dependencies where needed.
- Frequency aligns with recovery requirements.
- Backups are stored separately.
- Backups are protected like original data.
- Restore testing is scheduled.
- Template
- Iso27001
- Technological controls
- Backup
Note Metadata
Aliases: Backup Schedule
Source: 90 Templates/Backup Policy and Schedule.md
Related Notes
- ISO 27001 A.5.29 - Information Security During Disruption
- ISO 27001 A.5.30 - ICT Readiness for Business Continuity
- A.8.13 Audit Evidence Pack
- ISO 27001 A.8.13 - Information Backup
- A.8 Technological Controls MOC
- A.8 Technological Controls Implementation Guide
- A.8 Technological Controls Audit Guide
- A.8 Technological Controls Implementation Audit Risk Mapping
- ISO 27002 Annex A Control Interpretation Map
- A.8.13 Audit Checklist
- Backup and Restore Test Record
- Templates MOC