 |
 |
|
Backup and Recovery Policy
Data custodians are responsible for providing adequate backups to ensure the recovery of electronic information in the event of failure. These backup provisions will allow College business processes, including the research enterprise to be resumed in a reasonable amount of time with minimal loss of data. Since failures can take many forms, and may occur over time, multiple generations of backups should be maintained.
Federal and state regulations pertaining to the long-term retention of information (e.g., financial records) will be met using separate archive policy and procedures. Long-term archive requirements are beyond the scope of this policy.
Policy Statement:
- Backups of all GLCC records and software must be retained such that computer operating systems and applications are fully recoverable. This may be achieved using a combination of image copies, incremental backups, differential backups, transaction logs, or other techniques.
- The frequency of backups is determined by the volatility of data; the retention period for backup copies is determined by the criticality of the data. At a minimum, backup copies must be retained for 30 days.
- At a minimum, one fully recoverable version of all GLCC Records must be stored in a secure, off-site location.
- Derived data should be backed up only if restoration is more efficient than creation in the event of failure.
- All GLCC Record information accessed from workstations, laptops, or other portable devices should be stored on networked file server drives to allow for backup. GLCC Record information located directly on workstations, laptops, or other portable devices should be backed up to networked file server drives.
- Recovery procedures must be tested on an annual basis.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
