Backup Policy

1. Overview
This policy defines the backup policy for computers within the organization which are expected to have their data backed up. These systems are typically servers but are not necessarily limited to servers. Servers expected to be backed up include the data server, the file server, the mail server, and the web server.

2. Purpose
This policy is designed to protect data in the organization to be sure it is not lost and can be recovered in the event of an equipment failure, intentional destruction of data, or disaster.

3. Scope
This policy applies to all equipment and data owned and operated by the organization.

4. Definitions
1) Backup – The saving of files onto magnetic tape or other offline mass storage media for the purpose of preventing loss of data in the event of equipment failure or destruction.
2) Archive – The saving of old or unused files onto magnetic tape or other offline mass storage media for the purpose of releasing on-line storage room.
3) Restore – The process of bringing off line storage data back from the offline media and putting it on an online storage system such as a file server.

5. Timing
Full backups are performed weekly on each Sunday midnight, and differential backup are performed on a daily basis, it means differential backup should be performed on Monday, Tuesday, Wednesday, Thursday, and Friday.

6. Age of tapes
The date each tape was put into service shall be recorded on the tape. Tapes that have been used longer than six months shall be discarded and replaced with new tapes.

7. Responsibility
The IT department manager shall delegate a member of the IT department to perform regular backups. The delegated person shall develop a procedure for testing backups and test the ability to restore data from backups on a monthly basis.

8. Testing
The ability to restore data from backups shall be tested at least once per month.

9. Data Backed Up
Data to be backed up include the following information:
1) User data stored on the hard drive.
2) System state data
3) The registry

Systems to be backed up include but are not limited to:

1) File server
2) Mail server
3) Production web server
4) Production database server
5) Domain controllers
6) Test database server
7) Test web server

10. Archives
Archives are made at the end of every year in December. User account data associated with the file and mail servers are archived one month after they have left the organization.

11. Restoration
Users that need files restored must submit a request to the IT support. Include information about the file creation date, the name of the file, the last time it was changed, and the date and time it was deleted or destroyed.

12. Tape Storage Locations
Offline tapes used for differential backup shall be stored in an adjacent building in a fireproof safe. Full backup tapes shall be stored in our other facility in a fireproof safe.