SFS 4 / SF C

Back to SFS 4

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are backup copies of organization-owned data assets maintained with documented frequency and retention periods to support business continuity requirements throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented backup schedule showing required frequency and retention periods with evidence of execution

Assessment criterion and evidence

Actor: Organization. Scope: All organization-owned data assets across local, network-attached, and cloud storage systems. Evidence period: Entire review period. Required evidence: Documented backup policy specifying frequency/retention; Backup execution logs or verification records; Retention period confirmation in policy. Negative criterion: No documented backup schedule or evidence of executed backups meeting requirements. Missing evidence: Pending determination due to absence of documented evidence

View the JSON record (opens in a new tab).

Assessment result: unset.