1. List all computer systems in the organization that
are backed up. Obtain information for each system.
a. Describe the backup software
program(s) used. (ARCserve, Backup Exec, StorageExpress, Maynard, Tecmar,
etc.).
b. What content do backups
contain?
c. What's the frequency of
backup?
d. Is the backup process
automated?
e. Describe the type of backup
media used (tapes, discs, drives, cartridges).
f. Provide drive name and model
number.
g. Describe the tape rotation
cycle.
h. Have any tapes been pulled
from rota-tion?
i. What is the location of the
backup media (off-site storage, out-of-state storage, etc.)? How does the
media get to the storage location?
j. How are tapes stored? (Racks,
cabinets, etc.)
k. What is your tape destruction
method? (Degauss, shred, etc.)
l. Are backup tapes labeled? If
so, describe.
m. Are backup tapes indexed by
the backup software and/or logged?
n. Do you keep or discard
outdated backup drives or software?
o. Who has access to
backups?
p. Who actually performs the
backups?
q. Are backups password
protected? Who has the passwords?
2. Have you modified your backup procedures to comply
with recent discovery requests?
3. Are files ever deleted from the computer system(s)?
If yes:
a. Do you have a file purge
schedule?
b. Are files routinely deleted
from servers when employees leave or are reassigned?
c. Describe the method(s) used
to delete files.
d. Are e-mail/user server
accounts closed/purged when an employee leaves?
4. Are files "archived" off the system?
a. What files have been
archived?
b. Where are the archival
backups maintained?
5. Have you restored data from a backup
tape within the past 24 months? If yes:
a. What data was restored?
b. Was the restoration operation
successful?
c. Describe the resources
required to perform the restoration (labor hours, equipment, drive space,
etc.).
d. Why was the data restored?
