Backup & Recovery Procedure

Inside the document

1. Set the targets
2. Scope and configure jobs
3. Protect the copies
4. Monitor jobs
5. Test restores
6. Recover when needed
7. Retain, dispose and improve

Plus document control, roles, exceptions, enforcement, review cycle and an auditor evidence checklist.

Sample clause · Protect the copiesKeep an isolated copy. Keep at least one copy that is offline, immutable or otherwise unreachable using ordinary production administrator credentials, so ransomware or a rogue administrator cannot delete every copy.

What an auditor will check

Backup coverage matches the critical systems, copies are protected, failures are followed up and restores are tested against the recovery targets.