Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleDoes your organisation ensure that all used digital media (that may have stored data) is disposed of securely and are certificates of destruction obtained?

Does your organisation ensure that all used digital media (that may have stored data) is disposed of securely and are certificates of destruction obtained?

Media storage devices used to store customer data are classified by AWS as critical and treated accordingly, as high impact, throughout their life-cycles. AWS has exacting standards on how to install, service, and eventually destroy the devices when they are no longer useful. When a storage device has reached the end of its useful life, AWS decommissions media using techniques detailed in NIST 800-88. Media that stored customer data is not removed from AWS control until it has been securely decommissioned.

More information: https://commonplace.atlassian.net/l/cp/GfC6f8mE

Expand
titleDoes your organisation take regular backups of its digital production data in line with current best practise guidelines?

Does your organisation take regular backups of its digital production data in line with current best practise guidelines?

Commonplace performs regular backups of all our data, and therefore if the worst happened and all of our data were lost, the worst case scenario would be that we would restore the backup.
These backups are tested on a monthly basis XXXXX. All data in the backups is encrypted.
Backup schedule:

  • Every 4 hours, retained for a week

  • Every day, retained for a week

  • Every week, retained for a month,

  • Every month, retained for a year

...