PR.DS-11.236

Does your organization maintain offline and offsite backups that would remain unaffected by incidents or disasters impacting your primary systems?

Explanation

Offline backups (disconnected from networks) and offsite backups (stored in a different physical location) provide critical protection against ransomware, malware, physical disasters, and other threats that could compromise your primary systems and connected backup solutions. These backups serve as your last line of defense when all other recovery options fail. Evidence could include documentation of your backup strategy showing offline/offsite components, backup schedules and rotation policies, contracts with offsite storage providers, or photographs of physical media in secure offsite locations with appropriate handling procedures.

Implementation Example

Securely store some backups offline and offsite so that an incident or disaster will not damage them

ID: PR.DS-11.236

Context

Function
PR: PROTECT
Category
PR.DS: Data Security
Sub-Category
Backups of data are created, protected, maintained, and tested

ResponseHub is the product I wish I had when I was a CTO

Previously I was co-founder and CTO of Progression, a VC backed HR-tech startup used by some of the biggest names in tech.

As our sales grew, security questionnaires quickly became one of my biggest pain-points. They were confusing, hard to delegate and arrived like London busses - 3 at a time!

I'm building ResponseHub so that other teams don't have to go through this. Leave the security questionnaires to us so you can get back to closing deals, shipping product and building your team.

Signature
Neil Cameron
Founder, ResponseHub
Neil Cameron