Backup refers to a copy of data, applications, or systems that is made and stored in a separate, secure location. The purpose of a backup is to ensure the availability and integrity of information by allowing for recovery in the event of data loss, corruption, or a system failure.
Types & Examples
- Full Backup: A complete copy of all selected data. While this is the most straightforward method, it requires significant storage space and time.
- Incremental Backup: A backup of only the data that has changed since the last backup of any type. This is faster and uses less space than a full backup but can be more complex to restore.
- Differential Backup: A backup of all data that has changed since the last full backup. It’s a middle-ground approach that is quicker to restore than incremental backups.
ISO 27001 Context
The ISO 27001 standard requires organisations to establish a robust backup policy and implement technical controls (ISO 27001 Annex A 8.13 Information Backup) to protect against data loss.
Backups are a core component of business continuity and disaster recovery planning, ensuring that critical information can be restored quickly and efficiently after a disruptive event.
Stuart Barker
Stuart Barker is a qualified ISO 27001 Lead Auditor and veteran practitioner with over 30 years of experience in systems security and risk management. Holding an MSc in Software and Systems Security, he combines academic rigour with extensive operational experience, including a decade leading Data Governance for General Electric (GE).
He is the founder of High Table and the Lead Consultant driving the world’s number 1 dedicated ISO 27001 Consultancy.
