S 6.20 Appropriate storage of backup data media

Initiation responsibility: IT Security Officer, Head of IT

Implementation responsibility: User, Administrator

Backup data media are subject to special requirements in terms of storage:

• Only authorised personnel must be granted access to these data media to ensure the media are not stolen.
• Sufficient access speed must be available whenever it is needed.
• The storage location must also ensure the climatic conditions necessary for long-term storage of data media.
• In case of a disaster, the data backup media must be stored separately from the computer and, if possible, in a different fire section.

The requirements in S 2.3 Data media control must also be met.

Review questions:

• Are backup data media protected against unauthorised access?
• Are backup data media stored separately from the systems the backed up data comes from?
• Does the storage location of backup data media meet the climatic conditions for long-term storage as well as the required access options?