Backup and Recovery Policy

Objective

Ensure the availability of information in the event of failures or incidents.

guidelines

• Automatic daily backups
• Database and file coverage
• Vendor-defined retention (typically 7–30 days)
• Cloud infrastructure storage

Recovery

• On-demand catering
• Operational validation of backups

RTO / RPO

• RTO: 4–24 hours
• RPO: up to 24 hours