Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)
5.8: Operations security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1) 5.8.1: Keep offline backups, test recovery and secure compliance copies

What does 5.8.1 require?

Because backup media held by a provider may commingle tenants' data, a B/D keeps, for important systems, a regular offline backup of operational data from which the latest state can be recovered, and tests recovery regularly so procedures stay current and work. Backup and duplicate copies of logs, of access records and of anything else needed for legal or compliance purposes are stored securely and reachable only by authorised persons.

Maintained by Gerard Blokdyk

Other controls in 5.8: Operations security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.