7/29/2019 backupchecklist.xls
1/4
No. Control Objective Procedure
1 Backup Procedure Does the Backup policies and procedures cover
followingminumum requirements:
- The Servers to be backed up.- Location of mission critical
files.- The files/folders to be backed up for users.- Schedule of
back up.- Backup operators and their rights.- Key backup procedures
(If key based encryption or authentication are used).
- Location of Backups.- Users authorized to restore data.-
Restoration procedures.
2 BackupConfiguration
Based on BCP document, identify all critical computer processing
environments for which backup copies arerequired.
For each environment, outline the specific rotationalprocedure
in the following table(s) by identifying the type andlevel of
backup, which generation is moved off-site, howmany generations are
retained off-site, and which day therotation occurs.
For each environment, obtain screen captures from thebackup
software that show:o The selection of files that are backed upo The
schedule that the backup job is set to followo A recent log file
showing a successful backup of the systemo A recent restore log
file (if available) showing a successfulrestore of the system
3 Distance of off-sitestorage
Physically visit the off-site storage facility, if it is
withinreasonable distance of the site, or use alternative
reviewtechniques. Describe location of off-site storage
facility.
4 Off-site BackupTape
While at the off-site storage facility, verify that the proper
backup media including all incremental and full imagebackups
identified above as being retained off-site are safe,current, and
readily available in off-site storage.
5 Existence of BCPdoc in Off-SiteStorage
While at the off-site storage facility, verify that copies of
theBCP documentation is retained in off-site storage and withkey
members of the Disaster Recovery Organization.
Backup/Restore Operation Audit ChecklistDate:
Assessor:
7/29/2019 backupchecklist.xls
2/4
6 Existence of systemdoc in Off-SiteStorage
While at the off-site storage facility, verify that
appropriatesystems documentation is retained in off-site
storage.
7 EnviromentalControl of Off-siteStorage
Determine that the off-site storage area is reasonablyremoved
from the computer room to avoid simultaneousdestruction resulting
from a likely natural or man-made
disaster, is environmentally safe for the type of media
stored,is adequately safeguarded to prevent the loss or
misappropriation of the information stored, and is
reasonablyaccessible during non-business hours.
