S 6.21 Backup copy of the software used

Initiation responsibility: Head of IT Section, IT Security Management

Implementation responsibility: Administrator, IT users

Backup copies of the original data media of standard (purchased) software and/or of the original versions of individual software must be made from which the respective software can be replayed in case of need. The original data media and the backup copies must be kept in different places. It must be ensured that the physical write-protect feature of the data media will prevent unintentional deletion or overwriting of the data.

In case the software is provided on CD-ROM, a backup copy should alternatively be made of the software after installation as the data contained on the CD ROM is generally too comprehensive.

Any unauthorised access, e.g. for the purpose of pirating, must be ruled out.

Additional controls:

• Have backup copies been made of the software used?

• Is storage of the data media sufficiently secure?