Develop a plan to avoid data loss.

Development should include

  • determining what data should be backed up
  • choosing the type and frequency of backups
  • establishing a policy for restoring data
  • selecting a remote storage facility
  • documenting the plan
  • determining a retention period
  • deciding on tape backup vs. disk backup
  • selecting file-by-file backups vs. snapshots vs. system images
  • determining the appropriate levels of access to data, based on principle of least privilege
  • implementing strategies and solutions to prevent data loss, whether accidental or as a result of malicious activity
  • creating and documenting a backup policy
  • testing the backup plan, to include restoration of data.