Data Backups

Data Backups are crucial to protect against data loss and ensure business continuity in case of system failures or cyberattacks

How often do you take backups?

Are backups encrypted and stored offsite?

Are backups tested regularly to ensure integrity?

Are backups automated to reduce human error?

Critical Systems

Your critical systems need to be identified and prioritised to ensure the most essential business functions can be restored quickly after a disruption.

What are the critical systems in your organisation?

Are there failover or redundancy systems in place?

How long can your business operate without critical systems?

Recovery Plan

A Recovery Plan should detail step-by-step procedures for restoring systems and data following an incident

Is there a documented disaster recovery plan?

Does your disaster recovery plan clearly outline how quickly you need your systems up and running after an incident, and how much data loss is acceptable?

Has the disaster recovery plan been tested in the last 12 months?

Disaster Readiness

Disaster Readiness involves proactively planning and preparing for potential disruptions to minimise their impact

Is there a designated disaster recovery team?

Has a risk assessment been conducted for disaster scenarios?

Is there an emergency communication plan in place?

Business Impact

Assessing Business Impact helps determine the potential consequences of disruptions on various business areas, enabling informed decision-making regarding recovery priorities

What is the financial impact of downtime (hourly, daily)?

How would downtime affect compliance and customer relations?

What percentage of revenue would be lost during a disruption?

Security Measures

Robust Security Measures are essential to protect against cyber threats and safeguard sensitive data

Are regular security audits performed?

Are employees trained in cybersecurity best practices?

Cloud & SaaS Services

Cloud & SaaS Services can offer flexibility and scalability for data storage and recovery however responsibility for your business data still sits with you.

Are cloud/SaaS services regularly backed up?

Do you follow the shared responsibility model for cloud services?

Is there a vendor exit strategy for SaaS data migration?

Governance Risk and Compliance

Governance, Risk, and Compliance frameworks provide a structured approach to managing IT risks, ensuring regulatory compliance, and promoting responsible data handling practices.

Are you aware of your industry regulations (e.g., GDPR, DSPTK, SRA etc))?

Are internal compliance reviews conducted regularly?

Is sensitive data encrypted to meet compliance standards?