(j) Data backups 53. Do controls include adequate backup, including, but not limited to, the following: 543.20(j)(1) ____ ____ ____ Daily data backup of critical information (i) technology systems? (Inquiry and review supporting documentation) 54. Do controls include adequate backup, including, but not limited to, the following: 543.20(j)(1) ____ ____ ____ Data backup of critical programs or the ability (ii) to reinstall the exact programs as needed? (Inquiry and review supporting documentation) 55. Do controls include adequate backup, including, but not limited to, the following: 543.20(j)(1) ____ ____ ____ Secured storage of all backup data files and (iii) programs, or other adequate protection? (Inquiry and observation) 56. Do controls include adequate backup, including, but not limited to, the following: 543.20(j)(1) ____ ____ ____ (iv) Mirrored or redundant data source? (Inquiry and review supporting documentation) 57. Do controls include adequate backup, including, but not limited to, the following: 543.20(j)(1) ____ ____ ____ (v) Redundant and/or backup hardware? (Inquiry and review supporting documentation) 58. Do controls include recovery procedures , including, but not limited to, the following: 543.20(j)(2) ____ ____ ____ (i) Data backup restoration? (Inquiry and review supporting documentation) 59. Do controls include recovery procedures , including, but not limited to, the following: 543.20(j)(2) ____ ____ ____ (ii) Program restoration? (Inquiry and review supporting documentation) 60. Do controls include recovery procedures , 543.20(j)(2) including, but not limited to, the following: ____ ____ ____ (iii) Redundant or backup hardware restoration?
(j) Data backups 53. Do controls include adequate backup, including, but not limited to, the following: Daily data backup of critical information technology systems? (Inquiry and review supporting documentation) ____ ____ ____ 543.20(j)(1) (i) 54. Do controls include adequate backup, including, but not limited to, the following: Data backup of critical programs or the ability to reinstall the exact programs as needed? (Inquiry and review supporting documentation) ____ ____ ____ 543.20(j)(1) (ii) 55. Do controls include adequate backup, including, but not limited to, the following: Secured storage of all backup data files and programs, or other adequate protection? (Inquiry and observation) ____ ____ ____ 543.20(j)(1) (iii) 56. Do controls include adequate backup, including, but not limited to, the following: Mirrored or redundant data source? (Inquiry and review supporting documentation) ____ ____ ____ 543.20(j)(1) (iv) 57. Do controls include adequate backup, including, but not limited to, the following: Redundant and/or backup hardware? (Inquiry and review supporting documentation) ____ ____ ____ 543.20(j)(1) (v) 58. Do controls include recovery procedures , including, but not limited to, the following: Data backup restoration? (Inquiry and review supporting documentation) ____ ____ ____ 543.20(j)(2) (i) 59. Do controls include recovery procedures , including, but not limited to, the following: Program restoration? (Inquiry and review supporting documentation) ____ ____ ____ 543.20(j)(2) (ii) 60. Do controls include recovery procedures , including, but not limited to, the following: Redundant or backup hardware restoration? ____ ____ ____ 543.20(j)(2) (iii)
54320IT%20ITDataChecklist10012014.docx