S 6.41 Training data reconstruction

Initiation responsibility: IT Security Management

Implementation responsibility: Person-in-charge of data backup

The restoration of data using data backups must be tested at irregular intervals, at least after every modification to the data backup procedure. It must at least once be proven that complete data restoration is possible (e.g. all data contained in a server). This ensures reliable testing as to whether

• data restoration is possible

• the data backup procedure is practicable

• there is sufficient documentation of the data backup, thus allowing a substitute to carry out the data restoration if necessary

• the time required for the data restoration meets the availability requirements (c.f. S 6.1 Development of a survey of availability requirements)

When training for data restoration, the following should also be taken into consideration:

• the data must be installed on an alternative IT system

• different writing/reading equipment is used for the data backup and data restoration

Additional controls:

• Can a specialist carry out the data restoration using the existing documentation?