Sekit CSF · Familia
Backup & Recovery
21 controles en 7 temas, cada uno visto a través de las lentes de política, proceso y técnica.
Política
RCF-0244Backup coveragesin mapeos aúnAll critical systems and data are formally required to be included in the backup programmeRCF-0238Backup policysin mapeos aúnThe company has a formal policy defining how often data is backed up and how backups are protectedRCF-0253DR exercisessin mapeos aúnDisaster recovery is formally exercised on a regular schedule to validate recovery capabilityRCF-0241Immutable/offsite backupssin mapeos aúnBackups are formally required to be stored in a location that cannot be modified or deleted by attackersRCF-0247Restore testingsin mapeos aúnThe company formally requires that backups are regularly tested to confirm data can be recoveredRCF-0250RTO/RPO definitionssin mapeos aúnMaximum acceptable recovery time and data loss are formally defined for all critical systemsRCF-0256Runbooks for recoverysin mapeos aúnDocumented step-by-step recovery procedures exist for all critical system failures
Proceso
RCF-0245Backup coveragesin mapeos aúnBackup coverage is consistently reviewed to ensure no critical data is excludedRCF-0239Backup policysin mapeos aúnBackup procedures are consistently followed and backup completion is verified regularlyRCF-0254DR exercisessin mapeos aúnDisaster recovery exercises are consistently conducted and findings drive improvements to recovery plansRCF-0242Immutable/offsite backupssin mapeos aúnImmutable and offsite backup copies are consistently maintained and verifiedRCF-0248Restore testingsin mapeos aúnRestore tests are consistently conducted and results are documented to confirm recovery capabilityRCF-0251RTO/RPO definitionssin mapeos aúnRecovery time and point objectives are consistently communicated and factored into recovery planningRCF-0257Runbooks for recoverysin mapeos aúnRecovery runbooks are consistently followed during incidents and kept current with system changes
Técnica
RCF-0246Backup coveragesin mapeos aúnTechnical tools monitor backup coverage and alert when critical systems fall outside the backup scopeRCF-0240Backup policysin mapeos aúnTechnical controls automate backup execution and alert when backups fail or are incompleteRCF-0255DR exercisessin mapeos aúnTechnical tools support realistic disaster recovery simulation without impacting production systemsRCF-0243Immutable/offsite backupssin mapeos aúnTechnical controls enforce write-once backup storage and replicate copies to a separate secure locationRCF-0249Restore testingsin mapeos aúnTechnical controls automate restore testing and validate the integrity of recovered dataRCF-0252RTO/RPO definitionssin mapeos aúnTechnical architecture is designed to meet defined recovery time and recovery point objectivesRCF-0258Runbooks for recoverysin mapeos aúnTechnical tools provide guided recovery procedures and track execution steps during incidents
Pregúntale a Sekura: «¿Qué evidencia demuestra Backup & Recovery?»
Conecta tu IA · MCP gratis
https://staging.sekit.ai/api/mcp/crosswalk- En Claude o ChatGPT, añade un conector personalizado y pega esta URL.
- Inicia sesión con tu correo para terminar. Gratis, de solo lectura, sin necesidad de organización.