حوكمة ومخاطر وامتثال الأمن السيبراني (GRC) 15 بند
Backup & Recovery Testing Audit
قائمة التحقق هذه باللغة الإنجليزية.
Audits backup coverage, immutability, and restore testing to validate recoverability from data loss and ransomware events.
CIS v8NIST 800-53ISO 27001
PDF أو Word مجانًا · أدخل بريدك الإلكتروني للتنزيل.
Backup Scope & Scheduling
- Are all critical systems and data included in an automated backup schedule? *
- Do backup frequencies meet the defined recovery point objectives (RPO)? *
- Is a documented backup policy maintained and approved? *
- Are SaaS and cloud workloads (email, collaboration) backed up?
Resilience & Protection
- Is at least one backup copy kept offline, air-gapped, or immutable? *
- Are backups encrypted at rest and in transit? *
- Are backup systems isolated so production credentials cannot delete backups? *
- Does the backup strategy follow a 3-2-1 (or better) model?
Restore Testing
- Are restore tests performed on a defined recurring schedule? *
- Do restore tests confirm recovery within the recovery time objective (RTO)? *
- Is backup data integrity validated (checksums or verification jobs)? *
- When was the most recent successful full restore test?
Monitoring & Retention
- Are backup job failures alerted and remediated? *
- Are retention periods defined to meet legal and regulatory requirements? *
- Is access to backup management consoles restricted and MFA-protected? *
نزّل قائمة تحقق Backup & Recovery Testing Audit كاملة
احصل عليها مجانًا بصيغة PDF أنيقة قابلة للطباعة أو مستند Word قابل للتعديل.