S 6.38 Back-up copies of transferred data

Initiation responsibility: IT Security Management

Implementation responsibility: IT-user

If the data intended for transfer have only been compiled for this purpose, without having been stored on another data medium, a backup copy of this data is required. If the data medium is lost or damaged, the data can be dispatched again easily.

Additional controls:

• Are backup copies required for data intended for exchange?