Article 12
|
(System Backup)
- An organization shall prescribe the duration of the information and communication system’s tolerance of data loss.
- An organization shall make a backup of the source codes and data of programs of the information and communication system.
- An organization shall test the backup information of the information and communication system on a regular basis to verify the reliability of the backup media and exhaustiveness of the information.
- A core system of a type 1 organization shall restore backups as part of the test of the business continuity plan.
- A core system of a type 1 organization shall store backups of important information and communication system software and other security related information in independent facilities or fireproof cabinets at a location different from that of the operating system.
|