Important Backup Considerations for BCP for CISA Preparation

CISA Quick Tips 19:
Backup is very important for most of the business and thus for Business Continuity.

An IS auditor while auditing/evaluating the backup Policy should see:

1. What data is being backed up?
all critical data must be the part of backup.

2. How backup is being taken ?
Whether backup procedure is

a. manual

b. automatic

c. electronical

d. or a mixture of one or more than above

3. How backed up data is being stored ?

4. Where backed up data is being stored?

5. Recovery strategy

6. periodic testing

7. documentation

******Periodic testing / recovery and documentation are the
most important part of backup policy*******.

CISA Type Question 19.

While auditing a small firm with very valuable data an auditor finds following?

A. Firm is having remote backup strategy
B. Makes the copy of data when data is updated and then transmission is done
C. Restoration of data is faster.
D. Backup policy implementation is costlier as compared to normal tape backup.

The above Electronic strategy is generally known as

1. Electronic vouching
2. Electronic vaulting
3. Electronic updation and transmission
4. Electronic casing

Answer to CISA Type question 18.

While auditing the encryption policy the IS auditor should see where the encryption is being used, whether the purpose of encryption is malicious and current regulatory policy.
So, the correct answer is 4. All of the above

Add Post To: | Digg| Technorati| del.icio.us| Stumbleupon| Reddit| BlinkList| Furl| Spurl| Yahoo| Simpy|