Data backups are an essential element of good storage security, but they are often the source of security woes. In fact, a significant percentage of security breaches can be attributed to the mismanagement and mishandling of data backups. Simply skimming through the Privacy Rights Clearinghouse's Chronology of Data Breaches shows that adequate data backup controls are lacking.
1. Ensure your security policies include backup related systems within their scope.
2. Include your data backup systems in your disaster recovery and incident response plans.
3. Assign backup software access rights only to those who have a business need to be involved in the backup process.
4. Store your backups offsite or at least in another building.
5. However you choose to store your backups (tape, NAS, or external drives) be sure to control access to the room/car/house in which the backups are stored.
6. Use a fireproof and media-rated safe. Many people store their backups in a "fireproof" safe, but typically one that's only rated for paper storage.
7. Find out the security measures that your offsite storage, data centre and courier services are taking to ensure that your backups remain in safe hands.
8. Password-protect your backups at a minimum.
9. Encrypt your backups in your hardware and software support it.
10. You've heard it a thousand times but it deserves repeating: your backup is only as good as what's on the backup media.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment