SekitCrosswalk
ENES
Empieza ahora
Sekit CSF · Familia

Backup & Recovery

21 controles en 7 temas, cada uno visto a través de las lentes de política, proceso y técnica.

Política

RCF-0244Backup coverage4 mapeosAll critical systems and data are formally required to be included in the backup programmeRCF-0238Backup policy4 mapeosThe company has a formal policy defining how often data is backed up and how backups are protectedRCF-0253DR exercises5 mapeosDisaster recovery is formally exercised on a regular schedule to validate recovery capabilityRCF-0241Immutable/offsite backups4 mapeosBackups are formally required to be stored in a location that cannot be modified or deleted by attackersRCF-0247Restore testing5 mapeosThe company formally requires that backups are regularly tested to confirm data can be recoveredRCF-0250RTO/RPO definitions4 mapeosMaximum acceptable recovery time and data loss are formally defined for all critical systemsRCF-0256Runbooks for recovery5 mapeosDocumented step-by-step recovery procedures exist for all critical system failures

Proceso

RCF-0245Backup coverage4 mapeosBackup coverage is consistently reviewed to ensure no critical data is excludedRCF-0239Backup policy4 mapeosBackup procedures are consistently followed and backup completion is verified regularlyRCF-0254DR exercises5 mapeosDisaster recovery exercises are consistently conducted and findings drive improvements to recovery plansRCF-0242Immutable/offsite backups3 mapeosImmutable and offsite backup copies are consistently maintained and verifiedRCF-0248Restore testing5 mapeosRestore tests are consistently conducted and results are documented to confirm recovery capabilityRCF-0251RTO/RPO definitions4 mapeosRecovery time and point objectives are consistently communicated and factored into recovery planningRCF-0257Runbooks for recovery5 mapeosRecovery runbooks are consistently followed during incidents and kept current with system changes

Técnica

RCF-0246Backup coverage3 mapeosTechnical tools monitor backup coverage and alert when critical systems fall outside the backup scopeRCF-0240Backup policy3 mapeosTechnical controls automate backup execution and alert when backups fail or are incompleteRCF-0255DR exercises6 mapeosTechnical tools support realistic disaster recovery simulation without impacting production systemsRCF-0243Immutable/offsite backups4 mapeosTechnical controls enforce write-once backup storage and replicate copies to a separate secure locationRCF-0249Restore testing4 mapeosTechnical controls automate restore testing and validate the integrity of recovered dataRCF-0252RTO/RPO definitions4 mapeosTechnical architecture is designed to meet defined recovery time and recovery point objectivesRCF-0258Runbooks for recovery5 mapeosTechnical tools provide guided recovery procedures and track execution steps during incidents

Esta familia en ISO/IEC 27001:2022

Cada elemento de marco al que mapean los controles de la familia, primero los más conectados; agrupado por familia del Sekit CSF, nunca por el índice del propio marco.

A.8.13 Information backupA.5.30 ICT readiness for business continuityA.5.1 Policies for information securityA.5.37 Documented operating proceduresA.5.29 Information security during disruptionA.8.14 Redundancy of information processing facilitiesA.8.15 LoggingA.5.36 Compliance with policies, rules and standards for information securityA.8.24 Use of cryptographyA.5.27 Learning from information security incidents

Esta familia en NIST CSF 2.0

PR.IR-04 Adequate capacity maintainedRC.RP-01 Recovery plan executedPR.DS-10 Data-in-use protectedRC.RP-02 Recovery actions performedRC.RP-03 Backup integrity verified
Pregúntale a Sekura: «¿Qué evidencia demuestra Backup & Recovery?»
También vía MCP, gratis con cuenta