Home → Best Practices → Network Security → Backups

1.10. Backups

• Must Have Practices

  • Systems deemed as critical should be backed up

    • This may included financial system, student systems, Active Directory, etc.

  • All backups should be securely stored at an offsite location

  • Be sure retention matches business objectives

  • Test your backups - cloud and local

  • Review cloud services DR plans

    • Don’t assume that cloud backups are safe

• Best Practices

  • All servers should be backed up

  • Use volume shadow copy

  • Prioritize backup of systems based on how critical they are to your environment

    • Create backup retention schedules based on priority of systems

  • Encrypt backup data, both in transit and at rest

  • Air gap between backups and production data to protect against crypto attacks