Backup Plan

Backup Policy and Procedures

Purpose

To implement a backup solution that meets GLBA, SOX, PCI-DSS and HIPPA compliance. This document is intended to provide details on the stipulations of data backup and retrieval operations to the client.

Scope

The intended recipients of this policy are internal departments that house their hardware in the First World Savings and Loan Data Center.

Policy

Information Technology recognizes that the backup and maintenance of data for servers are critical to the viability and operations of the respective departments. It is essential that certain basic standard practices be followed to ensure that data files are backed up on a regular basis.

Backup Content

The content of data backed up varies from server-to-server. The primary data that will be backed up are: Data files designated by the respective owners of the servers and in some instances System Data (Applications files for the server and other selected software installed on the server). Data to be backed up will be listed by location and specified data sources. This will be stipulated in a separate document called “Data Sources Manifest”. Because it is impractical for the Systems Support to backup every bit of data stored on the servers, the only data that Systems accepts responsibility for is the data which is explicitly listed in the “Data Source Manifest”.

Backup Types

Backup of servers will occur every day after regular business hours.

Full backup: Includes all the source files. This method ignores the file's archive bit until after the file is backed up. At the end of the job, all files that have been backed up have their archive bits turned off. Only one full backup will be done once a week followed by differential and/or incremental. Backups must be encrypted.

Differential backups: Includes files that have been changed since the last Full (Clear Archive Bit) or Incremental backup. If the archive bit is on, the file is backed up, and archive bit is not...