Securing Linux: A Survival Guide for Linux Security (Version 2.0)

1.6 BACKUP/RECOVERY PLAN

In the IT world, backup of systems is like brushing our teeth; we do it without even thinking about it. It has to be done so we do it. Because of the routine, we often do not consider the security implications around our backup procedures. Some security guidelines to remember:

• Secure backup tapes “ Backup tapes are often the only way to restore systems after an incident.

• Have a clearly documented backup plan “ Backup responsibilities usually lie with an operations center or with lower level IT people. Because these individuals rotate on a regular basis, it is necessary to have a clearly documented backup plan so that backup procedures are performed consistently.

• Clearly label backup tapes “ Clearly labeling backup tapes will prevent restoring a system with a tape that was not from that system.

• Store a copy of backup tapes offsite “ Offsite storage of backup tapes prevents against destruction by environmental disasters. It also helps to prevent against theft of backup tapes.

• Verify backup tapes “ Periodically run verifications against backup tapes to ensure that backup software is functioning properly and what you intended to backup was actually backed up.

• Test restore procedures periodically “ Testing restore procedures periodically will help eliminate surprises . You don't want to find out in the middle of a critical restore that you forgot something and have to start all over again.