S 6.74 Emergency archive

Initiation responsibility: Agency/company management; Head of IT Section

Implementation responsibility: Head of IT Section

An emergency archive contains the backup data media needed to restore the entire system again so that it is completely consistent.

Under no circumstances should it be possible for this stock of data backups to be lost due to the same damaging incident as the production data. It must be available and accessible even after a catastrophe, i.e. access to the backup data media and their transportation must be possible within the timeframe during which it is planned that operations should be able to resume. Holding the data in a data media safe or a data media security archive is not sufficient on its own since

• Access might not be possible due to rubble;

• It is possible that the location affected by the damage might be blocked off by the fire services or investigatory offices for several days;

• It might simply not be possible to enter the area any more, for example due to structural damage.

To resolve these problems, the backup data media should be stored externally.

The following options are available:

1. An emergency archive can be set up in another part of the building (normally two fire cuts away) or in a different building. The data media containing the backups must then be transported there promptly. The data backups stored there must, moreover, be protected against unauthorised access and sabotage. Depending on the risk situation, it is also necessary to think about protection against fire, conflagration gases, water and destruction due to magnetic fields. Hence placing the data in a data safe of a suitable class or in a data media security archive could be considered.

2. No data media are transported to the storage location. Instead, the data backup is transmitted over communication lines either to a robot archive or to remotely maintained mirror disks. For large volumes of data it is worthwhile using fibre optic cables that have a high data throughput and permit long communications links. To increase availability still further, with this solution consideration should be given to having redundant cable paths (see also S 6.18 Provision of redundant lines).

An emergency archive can also be run by external service providers which offer both data transfer and data storage. For an emergency the companies also provides hardware components that can take over information processing functions in the short-term if required. When choosing an external service provider it is necessary to agree specifically with it exactly what services it will perform and what security measures will be taken (see S 5.87 Agreement regarding connection to third-party networks).

Additional controls:

• Has the possibility that an emergency archive might be required been examined?

• Are the data backup media stored in a different fire cut from the IT systems?

• Is it necessary to have redundant cable paths to the emergency archive?