S 6.21 Backup copy of the software used

Initiation responsibility: Head of IT, IT Security Officer

Implementation responsibility: User, Administrator

In the event of problems regarding IT systems, it is often necessary to be able to promptly reinstall the operating systems and applications used. For this, all files required for installation must be present. Therefore, it is necessary to make copies and to archive these at a suitable location.

If the software is delivered on data media (e.g. DVDs, CDs, or USB sticks), a backup copy of the original data media of purchased software and/or of the original software in the event of in-house developments should be made that can be used to reinstall the software, if necessary. The original data media and the backup copies must be stored separately.

Applications in particular are often not delivered on data media, but only as separate installation files, as part of a package or software administration, or as source code packages. These installation sources should also be stored at a suitable location.

In order to install operating systems or applications subject to a fee, licence numbers must often be entered during installation. For this reason, it is necessary to also store these licence numbers in a suitable manner, along with the installation sources. Any unauthorised access to the installation media and the licence numbers, e.g. for making a pirate copy, must be excluded.

If the software was compiled from the source code, the documentation should also contain all compiler options used (especially the options used to call the "configure" script). If the software was installed from a binary package, each step taken to install the software must be documented so that it is possible to comprehend the installation at a later date.

Every change to a configuration file should be documented. It is recommended to use a version administration program. In addition, all configuration files must be backed up regularly.

Review questions:

© Federal Office for Information Security. All rights reserved.