S 6.26 Regular backup of PBX configuration data

Initiation responsibility: PBX System Manager

Implementation responsibility: Administrator

The configuration and application data of the PBX system used must be backed up at regular intervals, particularly after modifications. For this, a corresponding concept must be drawn up and coordinated with the general data backup concepts (see S 1.4 Data backup policy). Due to the similarity, the concept may be based on the concept for the active network components (see S 6.52 Regular backup of configuration data of active network components). For hybrid or VoIP PBX systems, the system installation and configuration may be backed up using images, snapshots, and software and configuration backups (see also S 6.101 Data backup when using VoIP).

Application data such as contact details or accounting information should be backed up as well. Backup times and forms must take into consideration the requirements regarding the maximum tolerable loss of data. The corresponding specifications must be adopted to an overall data backup plan of the central IT department.

It is essential that the current status before a failure or an emergency occurred can be restored in every case with the help of the precautions taken.

At regular intervals, it must be verified whether these backups are actually functional as bases for system recovery. Typical verifications of this kind include:

The tests and test results must be documented.

Review questions:

© Federal Office for Information Security. All rights reserved.