Ensure backups are synchronised for restoration to a common point in time
Ensure data, applications, and settings are backed up together to restore them to the same point in time.
🏛️ Framework
ASD Essential Eight
🧭 Control effect
Responsive
🛠️ E8 mitigation strategy
Regular backups
🔐 Classifications
N/A
🗓️ Official last update
N/A
✏️ Control Stack last updated
22 Feb 2026
🎯 E8 maturity levels
ML1
Backups of data, applications and settings are synchronised to enable restoration to a common point in time.
Source: ASD Essential Eight
Plain language
This control is about making sure that whenever you back up your computer data, your applications, and your settings, they are all synced up. It’s like having a time machine that can take your entire computer system back to a specific date. Without this, if something goes wrong, you might end up with data that doesn't match the applications or settings, which can cause more headaches during recovery.
Why it matters
Unsynchronised backups risk data mismatch, leading to extended downtime and potential data loss during recovery, harming operational continuity.
Operational notes
Regularly verify backup synchronisation so data, apps and settings can be restored to the same point in time, preventing mismatch and recovery errors.
Implementation tips
- The IT team should schedule regular backups of data, applications, and settings to occur at the same time. Use backup software that allows all elements to be backed up simultaneously.
- System administrators should verify that all critical data and applications are included in the backup process. Use a checklist to ensure no important elements are missed.
- The IT team should configure alert notifications for any failures in the backup syncing process. Use an automated system to send alerts to IT staff immediately if backups fail to sync.
- Security officers should ensure backup data is encrypted to protect it during transfer and storage. Implement encryption protocols on backup systems.
- The IT team should conduct regular tests of the entire restoration process to ensure it can effectively restore systems to the same point in time. Schedule these tests as part of your disaster recovery exercises.
Audit / evidence tips
-
Ask: How does the organisation ensure that backups of data, applications, and settings are synchronised?
-
Good: The organisation has documented backup procedures showing synchronised backup schedules and logs that demonstrate successful synchronisations
-
Ask: How does the organisation test the restoration of backups to a common point in time?
-
Good: The organisation conducts regular disaster recovery exercises with documented restoration tests that verify data, applications, and settings are restored synchronously
Cross-framework mappings
How E8-RB-ML1.2 relates to controls across ISO/IEC 27001, Essential Eight, and ASD ISM.
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.
ISO 27001
| Control | Notes | Details |
|---|---|---|
| Partially meets (1) | ||
| Annex A 8.13 | E8-RB-ML1.2 requires backups of data, applications and settings to be synchronised so restoration can occur to a common point in time | |
ASD ISM
| Control | Notes | Details |
|---|---|---|
| Partially meets (2) | ||
| ISM-1511 | E8-RB-ML1.2 requires synchronising backups across data, applications and settings to enable restoration to a common point in time | |
| ISM-1555 | ISM-1555 requires mobile devices to be backed up prior to overseas travel alongside updating and data minimisation steps | |
| Partially overlaps (3) | ||
| ISM-1547 | ISM-1547 requires organisations to develop, implement, and maintain data backup processes and procedures | |
| ISM-1548 | ISM-1548 requires organisations to develop, implement and maintain data restoration processes and supporting procedures | |
| ISM-1811 | ISM-1811 requires backups to be retained securely and resiliently so they remain usable when needed | |
| Depends on (1) | ||
| ISM-1515 | ISM-1515 requires organisations to test restoring data, applications and settings from backups to a common point in time during disaster ... | |
| Related (1) | ||
| ISM-1810 | ISM-1810 requires backups of data, applications and settings to be synchronised so restoration can occur to a common point in time | |