Information Backup Policy (A.12.3.1)

Objectives

Business Information and services are a vital part of any organization and should be protected. Simply saving information is not enough; performing backups of all application critical information within Breezy will help prevent business down time and/or loss of data and services. Without adequate backups, failure due to computer malfunction, human error, and natural disasters could cause unrecoverable interruptions.

  • The objective of this policy is to safeguard the Breezy information assets, prevent loss of data due to accidental deletion or corruption, and to facilitate timely restoration of information and business process(es) should a system failure occur.
  • In order to protect Breezy information assets and information systems, this Information Backup Policy is to protect both the company and individual users.
  • Backup of Breezy’s data files, and the ability to recover such data, is a top priority. Management is responsible for ensuring backup operation frequency and recovery procedure(s) aligns with the professional standards and product goals of Breezy HR and the Applicant Tracking System.

Scope

The Breezy HR Information Backup Policy shall apply to all information assets, information systems and other resources provided by Breezy for the purpose of supporting the Applicant Tracking System from Breezy HR.

Policy

General Requirements

Backups of Breezy servers and data must be retained to the degree server operating systems and applications are fully recoverable with limited data or service level agreement loss. This may be achieved using a combination of snapshots, copies, incremental backups, differential backups, transaction logs, or other techniques. Exceptions to this policy must be approved by the Engineering Manager.

Information system owners must ensure adequate backup and system recovery procedures are in place to ensure recovery from loss of service level.

Management must ensure safeguards are in place to protect the integrity of data files during the recovery and restoration of data files; especially where such files may replace more recent ones.

Information stored on laptops or portable computers must be backed up regularly. It is the responsibility of the user to ensure backups occur on a regular basis.

Storage media used for the archiving of information must be appropriate to expected longevity. The format in which data is stored must be carefully considered, especially where proprietary formats are involved.

Definitions

Backup - The procedure for making extra copies of information stored on disparate servers and computers in case the original is lost or damaged.

Restore - The process of returning to a former condition using a backup.

Responsibilities

  • The Engineering Manager is responsible for ensuring this Information Backup Policy remains current, and is aligned with Breezy business activities and security objectives.
  • All Breezy employees, contractors, and third-party vendors are responsible for compliance of all information backups detailed within the scope of this policy.