What to Provide
System screenshots demonstrating the backup configurations of all in-scope production systems required to provide services to customers.
The evidence should demonstrate:
Backup of infrastructure and data stores
What tool is used to perform backups
How often backups are performed
Where backups are maintained
System screenshots demonstrating your use of multiple availability zones (AZ) or regions for all cloud-based critical infrastructure and data needed to maintain your in-scope production systems.
The evidence should demonstrate:
Location of production environment
Replication location of critical infrastructure
Replication location of customer, sensitive, critical, and operational data
Updates of standby data stores to match production data stores
Failover configurations and settings
Associated Unified Control ID | Associated Framework Control |
CTRL-300 | LCL-57 |