This data security policy applies all customer data, personal data, or other company data defined as sensitive by the company's data classification policy. Therefore, it applies to every server, database and IT system that handles such data, including any device that is regularly used for email, web access or other work-related tasks. UNIVERSITY OF UTAH INFORMATION TECHNOLOGY POLICIES AND PROCEDURES. 2 5. Data Recovery - The purpose of backing up data is to store a copy of the data in the event of a disaster where data is lost or corrupt. Data recovery is the act of restoring data from the backup in order to restore data to the desired point in time. 6. The basic rule for business data protection is that if losing the data will interfere with doing business, back it up. Desktop software programs can be reinstalled if required, but recovering the details of transactions or business correspondence is impossible if those files are lost or damaged beyond repair. Data Archive vs Data Backup Organisations need to ensure they have taken the time to develop good policies on data storage to make it as secure and resilient as possible, at every level. "It starts with understanding your Your business must have a formalised set of policies and procedures in place, as a minimum, to ensure it meets the requirements as set out under GDPR and the DPA 2018. Having the right systems and Installing operating systems, performing a system backup, granting access rights to a system, and setting up new user accounts are all examples of procedures. Guideline Guidelines are recommendations to users when specific standards do not apply. Guidelines are designed to streamline certain processes according to what the best practices are. Your backup policy should follow the 3-2-1 rule, creating at least three backup copies of all data in addition to the original file using two different backup media, with one copy in a remote location. This helps to ensure a full set of accessible backup data no matter what the circumstances leading to the need to recover data. Best Practice: A backup policy helps manage users' expectations and provides specific guidance on the "who, what, when, and how" of the data backup and restore process. There are several benefits to documenting your data backup policy: Helps clarify the policies, procedures, and responsibilities. Allows you to dictate: where backups are located. security when selecting a company. USB backups give the convenience of a portable backup, but proper security must be maintained since they are small and easily lost. Older tape backups require special equipment, someone diligently managing the process, and secure storage. DATA-SECURITY TIPS Create an acceptable use policy as This backup will meet all necessary physical security, storage, documentation, and testing criteria. An individual outside of the technology team will audit all backup procedures regularly to insure that backups are taking place as outlined in the policy. IT Help Center. Anderson Academic Commons, Room 270. 2150 E. Evans Ave. effectiveness of back-up procedures to minimize loss for data residing on Securities and Exchange Commission mainframe and network computer systems. We found that back-up activities were reasonably effecti