Business Continuity and Disaster Recovery for InfoSec Managers

110 3.3 Other Preventative Controls

3.2.6 Archiving Electronic Files

There are a couple of significant issues to consider when archiving elec-

tronic data files. Legacy documents may not be able to be located or

retrieved due to inappropriate deletion or premature archiving. This can be

as a result of an unsuitable or unenforced retention policy. Also, confiden-

tial data can be lost or stolen while stored offsite, and due diligence must be

performed when choosing the vendor and method by which the data will

be stored offsite.

3.2.7 Recovery and Restoring of Data Files

As discussed previously, saving data on a backup tape or disk should be a

core element ...