As above, its different if your approved, we cant use any upload backup service, who knows who has access, crb checks etc. You cant get a job for an approved company with a conviction for fraud etc, but i bet you can work for a backup company.

Off site backups need to be carefully handled, encrypted of course and only moved when necessary, ie to move them off site.

you may want to consider an vpn link to home etc, and backup remotly over that. But again watch your security level at both ends.

We had a flood that wiped out all data. We upload daily but does this comply. Could of gone belly up (exagerating but its the jist) if not for uploading.

last years flood prompted us to get a server on the 1st floor which backs up to dat tape, tapes stored in a safe......... but not a proper data safe

As above, its different if your approved, we cant use any upload backup service, who knows who has access, crb checks etc. You cant get a job for an approved company with a conviction for fraud etc, but i bet you can work for a backup company.

Off site backups need to be carefully handled, encrypted of course and only moved when necessary, ie to move them off site.

you may want to consider an vpn link to home etc, and backup remotly over that. But again watch your security level at both ends.

Thanks for input

I wonder if there are any firms who specialise in security back ups? How do NSI suggest companies protect against distruption. Surely continuation of service is paramount?

I can see all that you say makes sense, but as a small business we rely on big firms complying with everything. I just assumed BT (esp with them doing redcare) would be full up to spec. But then I assumed MOD, NHS........

I can see all that you say makes sense, but as a small business we rely on big firms complying with everything. I just assumed BT (esp with them doing redcare) would be full up to spec. But then I assumed MOD, NHS........

And im sure they do, but if your using them to backup your db as an nsi approved firm you need to have contracts in palce as to who has access. IMO we wont take that risk.

We backup at work accross the building to 3 backup servers twice daily, and montly off site backup to 2 locations, with encrypted dvd's holding password protected data.

Our disaster recovery plan does not involve ANY outside agencies.

Maybe we should offer an offsite backup service as an NSI gold company, that way you could pay us to do it.....

James

Maybe we should offer an offsite backup service as an NSI gold company, that way you could pay us to do it.....

James

You seem to have plenty of back up sorted where you work, I assume big firm with 3 back up servers onsite and 2 remote locations.

Nothing wrong with being enterprising. If I'm paying for a service anyway that is not complying I'd be willing to swap to a service that does comply.

No we are a not a big firm, little nsi gold, but about 10 yr ago we had our first server suffer a raid 1 failure, and we lost over 2 weeks of data. It was decided THAT would NEVER happen again.

One of the 2 remote locations is my safe at home. lol

James

No we are a not a big firm, little nsi gold, but about 10 yr ago we had our first server suffer a raid 1 failure, and we lost over 2 weeks of data. It was decided THAT would NEVER happen again.

One of the 2 remote locations is my safe at home. lol

James

You scaring me geez. Think we'll go back to the old card index. Waterproof ink, they'll float in a flood. Get secretary wet suit n blue tooth.