System back-ups are important to maintain the integrity and recovery of your operation in case of compromise or disaster.
A backup and recovery strategy is another aspect of information protection and security planning. In the event of a system failure, good backups ensure the ability to recover data and resume business. Hardware failure, user mistakes or carelessness, intrusion by malicious hackers or willful damage by a disgruntled insider represent possible scenarios for loss of critical data. In the event of a system intrusion, good backups also preserve data for the incident handling team.
A set of recent backups should be kept at a safe offsite location in case there is serious damage to building facilities. Not only is it important to keep backups; it is vital to test the backups to make sure that critical systems can be restored as part of a periodically tested disaster recovery and business continuance plan.