SECURITY DOCUMENTS
Backup Policy
Last updated: 01 December 2022
Ref: 79ceda8e-bd39-427b-92cf-fafb3630e270
Purpose
1. The purpose of this policy is to ensure that data is protected and available for recovery in the event of data loss, damage, or system failures. 
Scope
2. This policy applies to all employees and information systems within Liqvid PTE. LTD.
Policy 
3.1 Backup and Recovery Procedures 
Liqvid PTE. LTD. shall establish and maintain backup and recovery procedures to ensure the timely and effective recovery of critical data, applications, and systems in the event of an unexpected outage or disaster.
Restoration Procedures:
a) Identify the latest backup file for the affected system or data and the backup device where it was saved. 
b) Verify the integrity of the backup file before restoring. 
c) Restore the backup file to the appropriate system or device. 
d) Verify the successful restoration of the data by comparing it with the original data.
d) Verify the successful restoration of the data by comparing it with the original data.
3.2 Backup Frequency 
Liqvid PTE. LTD. shall conduct regular backups of all critical data, applications, and systems in accordance with the business requirements and the following guidelines:
Backup of critical data shall be conducted at least once a day. 
Backup of less critical data shall be conducted at least once a week. 
3.3 Backup Retention
Liqvid PTE. LTD. shall retain backup data for a period of time in accordance with the following guidelines: 
Critical data backup shall be retained for at least 30 days.
Less critical data backup shall be retained for at least 7 days. 
3.4 Backup Media Security
Liqvid PTE. LTD. shall ensure that backup media is properly secured and protected from unauthorized access, theft, or damage. All backup media shall be stored in a secure location offsite.
3.5 Backup Testing
Liqvid PTE. LTD. shall periodically test the backup and recovery procedures to ensure that they are effective and that data can be restored in the event of a disaster. 
Testing Procedures: 
a) Develop a testing plan that outlines the scope, objectives, and procedures for testing backup files. 
b) Schedule regular testing of backup files to ensure their effectiveness. 
c) Select a representative set of backup files for testing. 
d) Verify the integrity of the backup files before testing. 
e) Test the backup files by restoring them to the appropriate system or device and verifying the successful restoration of data. 
f) Evaluate the effectiveness of the backup and restoration process and document the results of the test.
g) Identify any issues or gaps in the backup and restoration process and take appropriate corrective actions. 
h) Regularly review and update the testing procedures based on changes to the IT environment or business processes. 
3.6 Reporting
Liqvid PTE. LTD. shall maintain a record of all backup and recovery activities, including the frequency of backups, retention periods, and test results.
Responsibilities
4.1 Information Security Manager 
The Information Security Manager is responsible for the implementation and enforcement of this policy. Information about the current Information Security Manager in the company, as well as his contact details, is available in the Information Security Policy of the company. 
4.2 IT Staff 
IT staff is responsible for implementing and executing the backup and recovery procedures in accordance with this policy.
4.3 Business Units
Business units are responsible for identifying critical data, applications, and systems that need to be backed up and establishing recovery time objectives. 
Exceptions
5. Any exceptions to this policy must be approved by the Information Security Manager and documented in writing.
Review
6. This policy shall be reviewed annually or when significant changes occur to the backup and recovery procedures.
Download Liqvid Backup Policy