S 2.41 Employees' commitment to data backup

Initiation responsibility: Agency/company management

Implementation responsibility: IT Security Management

Data backup is an important IT security measure. For this reason, the relevant employees must be committed to adherence to data backup/minimal data backup concepts. Regular refresher and motivation campaigns on data backup must be conducted.

Additional controls:

• Are commitments to data backup documented in writing?

• Is adherence to data backup concepts being checked?