Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-9-1

Cybersecurity Requirements For Backup And Recovery Management Must Be Defined, Documented And Approved.

Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-9-2

The Cybersecurity Requirements For Backup And Recovery Management Must Be Implemented.

Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-9-3

  1. The cybersecurity requirements for backup and recovery management must include at least the following:
    1. Scope and coverage of backups to cover critical technology and information assets.
    2. Ability to perform quick recovery of data and systems after cybersecurity incidents
    3. Periodic tests of backup’s recovery effectiveness

Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-9-4

The Cybersecurity Requirements For Backup And Recovery Management Must Be Reviewed Periodically