Perform Automated Backups
Description
Perform automated backups of in-scope enterprise assets. Run backups weekly, or more frequently, based on the sensitivity of the data.
Implementation Checklist
Tool Recommendations
Enterprise backup, recovery, and data security platform for virtual, physical, cloud, and SaaS workloads
Veeam · Per-workload subscription
Enterprise data protection platform with backup, recovery, ransomware detection, and cyber deception
Commvault · Per-workload subscription
Zero Trust data security platform with immutable backups, ransomware monitoring, and automated recovery
Rubrik · Per-workload subscription
Modern data management platform with backup, recovery, ransomware protection, and data governance capabilities
Cohesity · Per-workload subscription
Threats & Vulnerabilities (CIS RAM)
Threat Scenarios
Data Loss from System Failure Without Current Backups
AvailabilityHardware failures, storage corruption, or accidental deletion destroy critical data, and without automated backups running on a defined schedule the organization cannot restore to a recent state, resulting in permanent data loss.
Ransomware Recovery Failure Due to Stale Backups
AvailabilityAfter a ransomware attack, the organization discovers that backups are weeks or months old because automated backup schedules were never configured, forcing a choice between paying the ransom or accepting significant data loss.
Business Continuity Failure from Manual Backup Neglect
AvailabilityManual backup processes are skipped during busy periods, staff transitions, or organizational changes, creating gaps in backup coverage that are only discovered when data recovery is needed during an incident.
Vulnerabilities (When Safeguard Absent)
No Automated Backup Schedule for Enterprise Assets
Critical enterprise data is not backed up on an automated schedule, relying on manual processes that are inconsistently followed, resulting in unpredictable backup currency and unknown recovery point capability.
Incomplete Backup Scope Missing Critical Data Stores
Automated backups cover some systems but miss critical databases, file shares, SaaS application data, or cloud workloads, leaving significant portions of enterprise data without any backup protection.
Evidence Requirements
| Type | Evidence Item | Collection Frequency |
|---|---|---|
| Document | Recovery plan documentation | Reviewed annually |
| Record | Recovery test results and lessons learned | Tested quarterly |
| Technical | Backup job status reports and success rates | Reviewed weekly |
| Record | Backup restoration test results | Tested quarterly |
| Document | Governing policy document (current, approved, communicated) | Reviewed annually |