Backups

Backups

1. Why are backups needed?

   • Loss of records leads to loss of contact with customers.
   • Loss of records means orders not completed to the customer's satisfaction.
   • Customers will lose confidence and go elsewhere.
   • Most companies that lose their data are out of business within months.
   • To avoid permanent data loss.
   • To ensure the integrity of stored data e.g. backup sufficiently up to date.

2. Threats to ICT Systems

   • Computer Hardware Failure.
   • Deliberate / Accidental Damage.
   • Theft / Hacking / Fire.
   • Viruses.
   • Software Bugs.
   • Power Cuts.
   • Software Failure.

3. Backup Strategies - Factors

   • FREQUENCY OF BACKUP - How often data changes affects how frequently it needs to be backed up.
   • VOLUME TO BACKUP - Whether all data will be backed up, or only data that's changed since last backup. The volume affects the time it takes to backup and medium to use.
   • STORAGE MEDIUM - Choose suitable medium, depending on volume of data, expense and convenience.
   • WHERE IT WILL BE STORED - Store in a secure location away from main system e.g. a fireproof safe or off-site.
   • PERSONNEL RESPONSIBILITY - Someone in charge of seeing backup is done. When away, someone else needs to be designated.
   • LOGGING BACKUPS - Keep log of backups and any problems that arise. Then address these problems.
   • TESTING OF BACKUP DATA - Every so often, load backup to test all data can be recovered if need arises,

4. How long should you keep backups for?

   • Keep daily backups for a week.
   • Keep weekly backups for a month.
   • Keep monthly backups for a year.

5. Recovery Procedures

   • 1. Ensure that computer system available. 2. Ensure that up-to-date information available. 3. Ensure that alternative accommodation for computer systems available. 4. Ensure that staff will be available and know what their role is.
   • CONSIDERATIONS - 1. Availability of computer system/HW. 2. Availability of programs/SW. 3. Availability of staff. 4. Staff knowledge of procedures. 5. Availability of communications. 6. Testing of recovery procedures. 7. Availability of accommodation for computer systems.