IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
these are archived. Only these authorised persons must be allowed to access
these archives. Furthermore, persons authorised to carry out restorations of
complete data stocks or selected, individual files must be appointed.
When determining these responsibilities, particular regard must be given to
data confidentiality and integrity requirements, as well as the reliability of the
employees in question. It must be ensured that the person-in-charge is
available at all times and a substitute should be appointed and trained.
The following factor is influential in this context:
Knowledge possessed by IT users:
The knowledge and data processing capabilities of each IT user determine
whether these individuals can be charged with the responsibility of
carrying out data backups. If the IT user in question does not possess
sufficient knowledge, responsibility must be transferred to the system
administrator or a qualified person.
Storage site
Data backup media and original data media must always be stored in different
fire sections. In the event that data backup media are stored in a different
building or off the premises, the probability of backup copies being damaged
in a crisis situation is lowered. However, the greater the distance between the
data media and the IT periphery required for restoration (e.g. tape station), the
longer the potential transport routes and times, and the longer the resulting
restoration periods. The following factor is influential in this context:
Availability requirements:
The higher the availability requirements, the more quickly the data media
need to be obtained for data backup. If data media with high availability
requirements are stored externally for safety reasons, consideration should
be given to storing additional backup copies in the immediate vicinity of
the IT system.
Data confidentiality and integrity requirements:
The higher these requirements are, the more important it is to prevent data
media from being manipulated. The necessary access control can generally
be achieved by appropriate infrastructural and organisational measures, see
Chapter 4.3.3. Data Media Archive
Data volume:
With increasing data volumes, the security of the storage site increases in
importance.
Requirements concerning the data backup archive
Due to the concentration of data on backup data media, the degree of
confidentiality and integrity of the backed up data is at least as high as that of
the original data. Consequently, appropriate IT security measures, e.g. access
control, are required for data media stored in a central archive.
In addition, organisational and personnel-related measures should be
implemented (data media management) to allow quick and accurate access to
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000