Ensure backups are synchronised for restoration to a common point in time
Ensure data, applications, and settings are backed up together to restore them to the same point in time.
Plain language
This control is about making sure that whenever you back up your computer data, your applications, and your settings, they are all synced up. It’s like having a time machine that can take your entire computer system back to a specific date. Without this, if something goes wrong, you might end up with data that doesn't match the applications or settings, which can cause more headaches during recovery.
Framework
ASD Essential Eight
Control effect
Responsive
E8 mitigation strategy
Regular backups
Classifications
N/A
Official last update
N/A
Control Stack last updated
19 Mar 2026
E8 maturity levels
ML1
Official control statement
Backups of data, applications and settings are synchronised to enable restoration to a common point in time.
Why it matters
Unsynchronised backups risk data mismatch, leading to extended downtime and potential data loss during recovery, harming operational continuity.
Operational notes
Regularly verify backup synchronisation so data, apps and settings can be restored to the same point in time, preventing mismatch and recovery errors.
Implementation tips
- The IT team should schedule regular backups of data, applications, and settings to occur at the same time. Use backup software that allows all elements to be backed up simultaneously.
- System administrators should verify that all critical data and applications are included in the backup process. Use a checklist to ensure no important elements are missed.
- The IT team should configure alert notifications for any failures in the backup syncing process. Use an automated system to send alerts to IT staff immediately if backups fail to sync.
- Security officers should ensure backup data is encrypted to protect it during transfer and storage. Implement encryption protocols on backup systems.
- The IT team should conduct regular tests of the entire restoration process to ensure it can effectively restore systems to the same point in time. Schedule these tests as part of your disaster recovery exercises.
Audit / evidence tips
- AskHow does the organisation ensure that backups of data, applications, and settings are synchronised?
- GoodThe organisation has documented backup procedures showing synchronised backup schedules and logs that demonstrate successful synchronisations
- AskHow does the organisation test the restoration of backups to a common point in time?
- GoodThe organisation conducts regular disaster recovery exercises with documented restoration tests that verify data, applications, and settings are restored synchronously
Cross-framework mappings
How E8-RB-ML1.2 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
| layers Partially meets (1) expand_less | ||
| Annex A 8.13 | E8-RB-ML1.2 requires backups of data, applications and settings to be synchronised so restoration can occur to a common point in time | |
ASD ISM
| Control | Notes | Details |
|---|---|---|
| layers Partially meets (2) expand_less | ||
| ISM-1511 | E8-RB-ML1.2 requires synchronising backups across data, applications and settings to enable restoration to a common point in time | |
| ISM-1555 | ISM-1555 requires mobile devices to be backed up prior to overseas travel alongside updating and data minimisation steps | |
| sync_alt Partially overlaps (3) expand_less | ||
| ISM-1547 | ISM-1547 requires organisations to develop, implement, and maintain data backup processes and procedures | |
| ISM-1548 | ISM-1548 requires organisations to develop, implement and maintain data restoration processes and supporting procedures | |
| ISM-1811 | ISM-1811 requires backups to be retained securely and resiliently so they remain usable when needed | |
| extension Depends on (1) expand_less | ||
| ISM-1515 | ISM-1515 requires organisations to test restoring data, applications and settings from backups to a common point in time during disaster ... | |
| link Related (1) expand_less | ||
| ISM-1810 | ISM-1810 requires backups of data, applications and settings to be synchronised so restoration can occur to a common point in time | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.