Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-9-1
Cybersecurity Requirements For Backup And Recovery Management Must Be Defined, Documented
And Approved.
Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-9-2
The Cybersecurity Requirements For Backup And Recovery Management Must Be Implemented.
Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-9-3
- The cybersecurity requirements for backup and recovery management must include at least the following:
- Scope and coverage of backups to cover critical technology and information assets.
- Ability to perform quick recovery of data and systems after cybersecurity incidents
- Periodic tests of backup’s recovery effectiveness
Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-9-4
The Cybersecurity Requirements For Backup And Recovery Management Must Be Reviewed Periodically