Data Backup & Retention
Data backups should be performed frequently during normal operations. Your organization needs to consider how often to back up data, what technology to use, and where the backup data should be stored.
Your organization should develop documented procedures regarding data restoration from backups and identify who is responsible for or able to access the backup media and information.
Use the Data Backup & Retention Form to document the types of data your organization has, the backup method you use and the frequency of your backups, the storage location(s) for your backup data, and the individuals authorized to access the backups.
If you would like to see an example, one is available for your review here.
The same care should be used with backup tapes as with normal operational data. If the information is confidential, extra care needs to be taken with the backup media to keep it secure.