{"id":5668,"date":"2020-10-06T17:59:18","date_gmt":"2020-10-06T15:59:18","guid":{"rendered":"https:\/\/tekmart.co.za\/t-blog\/?p=5668"},"modified":"2020-10-06T17:59:18","modified_gmt":"2020-10-06T15:59:18","slug":"best-practices-for-backup-audit-preparation","status":"publish","type":"post","link":"https:\/\/tekmart.co.za\/t-blog\/best-practices-for-backup-audit-preparation\/","title":{"rendered":"Best practices for backup audit preparation"},"content":{"rendered":"Reading Time-approximately:<\/span> 3<\/span> minutes<\/span><\/span>\n

What are must-have items to satisfy an audit of your backup platform? Why is auditing important? Discover how the audit process can help your organization improve.<\/strong><\/h2>\n\n\n\n
\"Paul<\/figure>\n\n\n\n

By Paul Kirvan<\/a><\/p>\n\n\n\n

Auditing provides an objective examination of how your organization performs controls and if the results are consistent with the control objectives. As data backups and related activities are mission-critical, they should be periodically reviewed to ensure that your organization is following backup policies, performing backup procedures consistently and carefully documenting results.<\/p>\n\n\n\n

Regardless of the type of data backup audit — first person (internal audit), second person (external audit by a contracted organization) or third person (fully independent external audit) — preparation and documentation are two essential components. In addition, make sure the audit firm is familiar with issues associated with\u00a0data backup and archiving, storage facilities and security, and is prepared to use that expertise.<\/p><\/blockquote>\n\n\n\n

Importance of the data backup audit<\/strong><\/h3>\n\n\n\n

Backup activities are critical, and your organization must perform them accurately and consistently. Failure to perform backups properly — even with\u00a0automated backup systems\u00a0and applications — can result in lost, stolen or corrupted data and databases. Periodic data backup audits ensure that the backup program is performing as it should and identify and correct any anomalies.<\/p>\n\n\n\n

Most important elements for an audit<\/strong><\/h3>\n\n\n\n

Preparation and documentation are the two most important items as you start the\u00a0IT data backup audit\u00a0process. Both electronic and hard copy documentation are essential as evidence, so be sure those items have been identified and readied for the audit.<\/p>\n\n\n\n

Identify and prepare a team that will deal with the auditors. Team members must understand what is going to happen during the audit, so they can respond to auditor questions accurately. Support from senior IT leadership is key, as the auditors may wish to interview multiple members of the senior IT team. The ability to demonstrate backup systems and how they operate is also important as auditors may wish to see how your organization performs backups.<\/p><\/blockquote>\n\n\n\n

Best practices for backup audit preparation<\/strong><\/h3>\n\n\n\n

While the following checklist of preaudit activities may not all be in place before the backup audit, be prepared to respond to the audit report that you plan to address the findings in accordance with the report’s recommendations.<\/p>\n\n\n\n

  1. Provide current copies of all data backup, archiving and related documentation, including\u00a0backup plans, backup policies and procedures, recent assessments, roles and responsibilities of backup teams, results of backup tests, previous backup problems and how they were resolved, backup training materials, backup schedules, reports on backup performance, evidence of previous management reviews and audits, and evidence of continuous improvement activities.<\/li>
  2. Show evidence that the backup program is part of a comprehensive\u00a0IT disaster recovery (DR) program.<\/li>
  3. Show proof that you have scheduled and conducted data backup and recovery tests, backup assessments, backup plan updates, and updates to policies and procedures.<\/li>
  4. Provide evidence that demonstrates\u00a0senior management support\u00a0for the data backup program, including a senior management sponsor, a budget and staff dedicated to data backups.<\/li>
  5. Provide proof that data backup and recovery activities are embedded in your organization as a strategic activity for the business.<\/li><\/ol>\n\n\n\n

    Are the auditors prepared?<\/strong><\/h3>\n\n\n\n

    As data backup and recovery are daily IT functions, check to see if the auditors are familiar with issues associated with\u00a0data backup and recovery, and if they have previously performed data backup audits.<\/p>\n\n\n\n

    If you are doing a first-party audit, it may be beneficial to provide background materials on data backup activities to your auditors so they can prepare accordingly. For external audits, ask if the prospective audit firm understands data backup and recovery activities.<\/p><\/blockquote>\n\n\n\n

    Reviewing the backup audit report<\/strong><\/h3>\n\n\n\n

    Once the audit report has been completed and delivered to the organization, review the findings and recommendations. Note any proposed time frames for delivering responses to the auditor. Brief senior IT management on the report as soon as possible, and be prepared to address any serious performance or\u00a0operational issues\u00a0identified in the report. The IT audit team should prepare a response to the audit report as soon as possible, with proposed actions and dates to address the recommendations.<\/p>\n\n\n\n

    With proper preparation, an understanding of the audit process, and lots of evidence supporting your data backup and recovery activities, your audit experience should be informative and enlightening, helping you to manage the most effective data backup and recovery program.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Reading Time-approximately:<\/span> 3<\/span> minutes<\/span><\/span>What are must-have items to satisfy an audit of your backup platform? Why is auditing important? Discover how the audit process can help your organization improve. By Paul Kirvan Auditing provides an objective examination of how your organization performs controls and if the results are consistent with the control objectives. As data backups and related activities are mission-critical, they should<\/p>\n

    Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[121,7,4,30,3],"tags":[],"class_list":["post-5668","post","type-post","status-publish","format-standard","hentry","category-archiving-and-backup","category-backup-and-archival-tools","category-datacenter-news","category-expert-advise-and-opinion","category-industry-news-and-expert-advise"],"_links":{"self":[{"href":"https:\/\/tekmart.co.za\/t-blog\/wp-json\/wp\/v2\/posts\/5668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tekmart.co.za\/t-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tekmart.co.za\/t-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tekmart.co.za\/t-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tekmart.co.za\/t-blog\/wp-json\/wp\/v2\/comments?post=5668"}],"version-history":[{"count":1,"href":"https:\/\/tekmart.co.za\/t-blog\/wp-json\/wp\/v2\/posts\/5668\/revisions"}],"predecessor-version":[{"id":5669,"href":"https:\/\/tekmart.co.za\/t-blog\/wp-json\/wp\/v2\/posts\/5668\/revisions\/5669"}],"wp:attachment":[{"href":"https:\/\/tekmart.co.za\/t-blog\/wp-json\/wp\/v2\/media?parent=5668"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tekmart.co.za\/t-blog\/wp-json\/wp\/v2\/categories?post=5668"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tekmart.co.za\/t-blog\/wp-json\/wp\/v2\/tags?post=5668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}