Here are the minimal requirements for central IT departments;
- Remote location
- Accurate and complete
- Restoration procedures
- Environment and physical protection in line with main location
- Access controls in line with original data
- Regularly Tested (incl. the operation of the control, the integrity of the backups and the effectiveness and timeliness of restoration)
Business with greater speed of data change may back-up more frequently or consider electronic vaulting whereby data is written twice, once locally and also to a remote machine.
However, sometimes backups are the responsibility of departments or individuals. In this case, clear guidance is required on responsibilities and protocols especially around handling of removable storage media.