Back up and recovery policy

Please note that as this policy is periodically reviewed and updated, if you print it from the website, its accuracy cannot be guaranteed for more than a 24 hour period following printing.

Introduction

The purpose of this Information Backup Policy is to ensure data held on information systems is backed up in accordance with business needs. Such back ups are critical to the processes of ensuring the integrity and availability of HFRS information assets and hence form a key part of HFRS Business Continuity Plans.

Scope

This Information Backup Policy shall apply to all information processed within HFRS whether the back up arrangements is the responsibility of the IS Department or mobile users.

Policy

The back up requirements of all information assets shall be identified and documented by the appropriate information owner. Back up controls shall ensure that the integrity and availability of information assets can be sustained in line with the identified and documented business requirements.

Implementation Responsibilities

Information Owners, in collaboration with the IS Department, shall identify and their requirements for data backup to achieve compliance with this Policy. Such requirements shall satisfy the data integrity and availability requirements of HFRS.

The IS Department shall be responsible for ensuring that back up controls are designed, implemented and maintained in order to satisfy the requirements of information owners.

Principles

All information assets processed by the IS Department on behalf of information owners shall be backed up on a regular basis according to identified and documented requirements.

All backed up data shall be subject to a defined retention period, which shall be determined by the information owner.

The IS Department shall ensure that back ups are verified before media is taken to secure storage.

Critical back up data shall be subject to quarterly read tests on a sample basis. Critical back up data shall be subject to annual read tests.

The IS Department shall develop, maintain and test back up recovery procedures on a routine basis according to business need.

Backed up data shall be stored on appropriate media (please see External Drive Policy), which shall facilitate recovery in a timely manner and suitable for the duration of the retention period required (please see service order SO/2/8). Backed up data and the media used shall be provided with appropriate logical, physical and environmental protection. Media used for back up purposes shall be disposed of in a secure manner if no longer required.