A.8.13
    Technological Controls

    Information backup

    Backup copies of information, software and systems should be maintained and regularly tested in accordance with the agreed topic-specific policy on backup.

    Purpose

    To protect against loss of data and ensure business continuity.

    Implementation Guidance

    Implement automated backup procedures

    Define backup frequency based on criticality

    Store backups securely and off-site

    Test backup restoration regularly

    Document backup and recovery procedures

    Recommended Tools

    ISO 27001 Services from the Directory

    These providers can help you implement A.8.13 and achieve ISO 27001 certification.

    By the team behind ISMS Directory

    Implementing A.8.13 for a client?

    ISMS Copilot drafts policies, evidence, and SoA wording for A.8.13 Information backup. Built for compliance professionals.

    Try ISMS Copilot free