simpl.
Connexion
GRC Cybersécurité 15 points

Backup & Recovery Testing Audit

Cette liste de contrôle est en anglais.

Audits backup coverage, immutability, and restore testing to validate recoverability from data loss and ransomware events.

CIS v8NIST 800-53ISO 27001

PDF ou Word gratuit · saisissez votre e-mail pour le télécharger.

Backup Scope & Scheduling

  • Are all critical systems and data included in an automated backup schedule? *
  • Do backup frequencies meet the defined recovery point objectives (RPO)? *
  • Is a documented backup policy maintained and approved? *
  • Are SaaS and cloud workloads (email, collaboration) backed up?

Resilience & Protection

  • Is at least one backup copy kept offline, air-gapped, or immutable? *
  • Are backups encrypted at rest and in transit? *
  • Are backup systems isolated so production credentials cannot delete backups? *
  • Does the backup strategy follow a 3-2-1 (or better) model?

Restore Testing

  • Are restore tests performed on a defined recurring schedule? *
  • Do restore tests confirm recovery within the recovery time objective (RTO)? *
  • Is backup data integrity validated (checksums or verification jobs)? *
  • When was the most recent successful full restore test?

Monitoring & Retention

  • Are backup job failures alerted and remediated? *
  • Are retention periods defined to meet legal and regulatory requirements? *
  • Is access to backup management consoles restricted and MFA-protected? *

Téléchargez la liste de contrôle Backup & Recovery Testing Audit complète

Obtenez-la gratuitement en PDF propre et imprimable, ou en document Word modifiable.