Information Technology Reference
In-Depth Information
•. e-Discovery. or. data. production. procedures—how.
do. you. access. and. acquire. your. data. if. the. data. are.
needed.in.an.eficacious.manner
The.most.important.thing.you.can.do.once.you.have.such.
a.contract.in.place.and.feel.satisied.that.all.of.your.concerns.
are. addressed. will. be. to. test!. Ask. your. provider. to. demon-
strate.that.their.security.can.stand.up.to.a.third-party.penetra-
tion.test.or.that.they.have.an.auditor.buy-off.such.as.a.SAS.
70.certiication.
*
.Ask.them.to.do.an.exercise.with.you.where.
they.and/or.you.have.had.a.disaster.or.some.other.need.to.
recover.your.data.and.ensure.that.those.procedures.work.as.
advertised..A.good.contract.agreement.is.the.irst.step.and.
an.important.one,.but.testing.to.ensure.all.of.the.processes.
actually.work.is.equally.important.and.should.be.done.on.a.
regular.basis.
You.can.also.choose.to.back.up.your.data.via.a.physical.
device.such.as.a.USB.external.drive.or.onto.CDs.or.DVDs.
or.onto.backup.tape.systems..This.can.be.a.good.choice,.but.
again.it.will.require.you.to.have.established,.well-documented,.
and.carefully.followed.procedures.in.place.
You. should. have. a. scheduled. and. if. possible. automated.
backup. date. and. time.. It. should. include. full. backups. on. a.
regular.basis.and.incremental.backups.(where.you.only.back.
up.data.that.has.changed.or.been.added).more.frequently.
Consider. where. the. backed-up. data. will. be. stored. and.
whether.you.will.want.to.have.more.than.one.copy..This.is.
again. a. risk. management. decision. that. should. be. based. on.
the.classiication.and.importance.of.the.data.
It. doesn't. make. sense. to. spend. the. time. and. money. to.
create.an.extensive.tape.library,.keep.multiple.redundant.cop-
ies,.and.have.both.on-.and.off-site.storage.if.the.data.you.are.
storing.are.readily.available.and.nonsensitive.information..On.
the.other.hand,.if.the.data.are.proprietary.or.conidential.and.
*.
http://sas70.com/..Retrieved.2012-03-18.
