IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
backup process. Some data backup programs therefore offer the possibility
of only transmitting information about changes in the data set which have
occurred since the last backup over the network connection. In many cases,
this can significantly reduce the volume of data to be transported.
An important requirement for the software used for data backup is that
unexpected termination of a connection should be detected and handled in
a proper manner. Termination of a connection must not result in
impairment of the consistency of the data backed up.
Under both data backup methods it is desirable to minimise the volume of data
to be backed up. As well as using loss-free compression techniques, which are
integrated into many data backup programs, incremental or differential backup
procedures can also be used (see also S 6.35 Stipulating data backup
procedures). However, use of such procedures means that restoration of a data
backup takes longer.
Data backup should be automated as far as possible so that users themselves
are required to perform as few actions as possible. If users must be involved,
they should be placed under an obligation to perform regular backups (see
S 2.41 Employees' commitment to data backup). Finally, sporadic checks
should be carried out to verify that data backups created can be restored (see
S 6.22 Sporadic checks of the restorability of backups).
Additional controls:
- Is all the data which is stored locally on mobile IT Systems backed up
regularly?
- Is the chosen backup method suitable for the volume of data?
- Is the number of actions required of the user during data backup kept to a
minimum?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000