SekitCrosswalk
ENES
Start now
Sekit CSF · Family

Backup & Recovery

21 controls in 7 topics, each seen through the policy, process and technical lenses.

Policy

RCF-0244Backup coverageno mappings yetAll critical systems and data are formally required to be included in the backup programmeRCF-0238Backup policyno mappings yetThe company has a formal policy defining how often data is backed up and how backups are protectedRCF-0253DR exercisesno mappings yetDisaster recovery is formally exercised on a regular schedule to validate recovery capabilityRCF-0241Immutable/offsite backupsno mappings yetBackups are formally required to be stored in a location that cannot be modified or deleted by attackersRCF-0247Restore testingno mappings yetThe company formally requires that backups are regularly tested to confirm data can be recoveredRCF-0250RTO/RPO definitionsno mappings yetMaximum acceptable recovery time and data loss are formally defined for all critical systemsRCF-0256Runbooks for recoveryno mappings yetDocumented step-by-step recovery procedures exist for all critical system failures

Process

RCF-0245Backup coverageno mappings yetBackup coverage is consistently reviewed to ensure no critical data is excludedRCF-0239Backup policyno mappings yetBackup procedures are consistently followed and backup completion is verified regularlyRCF-0254DR exercisesno mappings yetDisaster recovery exercises are consistently conducted and findings drive improvements to recovery plansRCF-0242Immutable/offsite backupsno mappings yetImmutable and offsite backup copies are consistently maintained and verifiedRCF-0248Restore testingno mappings yetRestore tests are consistently conducted and results are documented to confirm recovery capabilityRCF-0251RTO/RPO definitionsno mappings yetRecovery time and point objectives are consistently communicated and factored into recovery planningRCF-0257Runbooks for recoveryno mappings yetRecovery runbooks are consistently followed during incidents and kept current with system changes

Technical

RCF-0246Backup coverageno mappings yetTechnical tools monitor backup coverage and alert when critical systems fall outside the backup scopeRCF-0240Backup policyno mappings yetTechnical controls automate backup execution and alert when backups fail or are incompleteRCF-0255DR exercisesno mappings yetTechnical tools support realistic disaster recovery simulation without impacting production systemsRCF-0243Immutable/offsite backupsno mappings yetTechnical controls enforce write-once backup storage and replicate copies to a separate secure locationRCF-0249Restore testingno mappings yetTechnical controls automate restore testing and validate the integrity of recovered dataRCF-0252RTO/RPO definitionsno mappings yetTechnical architecture is designed to meet defined recovery time and recovery point objectivesRCF-0258Runbooks for recoveryno mappings yetTechnical tools provide guided recovery procedures and track execution steps during incidents
Ask Sekura: “What evidence proves Backup & Recovery?”
Connect your AI · free MCP
https://staging.sekit.ai/api/mcp/crosswalk
  1. In Claude or ChatGPT, add a custom connector and paste this URL.
  2. Sign in with your email to finish. Free, read-only, no organization required.