PR.DS-11.237
Does your organization enforce geographic separation and geolocation restrictions for data backup storage?
Explanation
Geographic separation of data backups helps ensure that a disaster affecting one location doesn't compromise all copies of critical data. This practice involves storing backup data in physically distant locations from the primary data, with restrictions on where backup data can be stored based on compliance requirements, data sovereignty laws, or risk management policies. Evidence of fulfillment could include documentation of backup storage locations (with geographic coordinates or regions), contracts with geographically dispersed backup service providers, configuration settings for cloud backup services showing geolocation restrictions, or data backup policies that explicitly define geographic separation requirements.
Implementation Example
Enforce geographic separation and geolocation restrictions for data backup storage
ID: PR.DS-11.237
Context
- Function
- PR: PROTECT
- Category
- PR.DS: Data Security
- Sub-Category
- Backups of data are created, protected, maintained, and tested

