Backup

11/09/2025

Author: Stuart Barker | ISO 27001 Expert and Thought Leader

Backup refers to a copy of data, applications, or systems that is made and stored in a separate, secure location. The purpose of a backup is to ensure the availability and integrity of information by allowing for recovery in the event of data loss, corruption, or a system failure.

Types & Examples

  • Full Backup: A complete copy of all selected data. While this is the most straightforward method, it requires significant storage space and time.
  • Incremental Backup: A backup of only the data that has changed since the last backup of any type. This is faster and uses less space than a full backup but can be more complex to restore.
  • Differential Backup: A backup of all data that has changed since the last full backup. It’s a middle-ground approach that is quicker to restore than incremental backups.

ISO 27001 Context

The ISO 27001 standard requires organisations to establish a robust backup policy and implement technical controls (ISO 27001 Annex A 8.13 Information Backup) to protect against data loss. Backups are a core component of business continuity and disaster recovery planning, ensuring that critical information can be restored quickly and efficiently after a disruptive event.

About the author

Stuart Barker is an information security practitioner of over 30 years. He holds an MSc in Software and Systems Security and an undergraduate degree in Software Engineering. He is an ISO 27001 expert and thought leader holding both ISO 27001 Lead Implementer and ISO 27001 Lead Auditor qualifications. In 2010 he started his first cyber security consulting business that he sold in 2018. He worked for over a decade for GE, leading a data governance team across Europe and since then has gone on to deliver hundreds of client engagements and audits.

He regularly mentors and trains professionals on information security and runs a successful ISO 27001 YouTube channel where he shows people how they can implement ISO 27001 themselves. He is passionate that knowledge should not be hoarded and brought to market the first of its kind online ISO 27001 store for all the tools and templates people need when they want to do it themselves.

In his personal life he is an active and a hobbyist kickboxer.

His specialisms are ISO 27001 and SOC 2 and his niche is start up and early stage business.