PRO-10 Regular and proven backups
3 actions under this Protect principle in ASD Essentials for enterprise IT. Each action links to plain-English guidance, audit tips and cross-framework mappings.
ASD principle statement
Systems (infrastructure, operating systems, applications and data) are regularly backed up in a secure and proven manner, including through the validation of restoration capabilities.
Quoted as published. Everything else on this page is written by Control Stack.
The three actions
- IT.PRO-10.1Back Up Data, Applications and Settings on Schedule to Encrypted, Resilient Storage
Backs up important data, apps and settings on a set schedule to encrypted storage that attackers cannot change or delete.
Domains:Boundary servicesIdentity servicesCritical processes and servicesPrivileged environmentsBusiness systems - IT.PRO-10.2Isolate Backup Repositories from General User Environments and Production Workloads
Keeps backups separate from staff computers and live systems, so anyone who breaks into those cannot reach, change or delete them.
Domains:Boundary servicesIdentity servicesCritical processes and servicesPrivileged environmentsBusiness systems - IT.PRO-10.3Regularly Test Backup and Restoration Procedures Against Defined Recovery Objectives
Tests backups and restore steps regularly to prove backups work and can meet defined targets for downtime and data loss.
Domains:Boundary servicesIdentity servicesCritical processes and servicesPrivileged environmentsBusiness systems
Back to the full Essentials for enterprise IT action list, or browse the complete control library.