[non-validated] Repository DORA SFS 9 / SF 1: Backup Storage Segregation (Placeholder)
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Has the entity implemented segregated and protected storage environments for backup copies to maintain their integrity and availability per DORA Article 12 requirements?
Explanation
[non-validated] Assess implementation of segregated and protected storage environments for backup copies as defined in the repository's DORA topic allocation. Evidence must confirm physical/logical isolation and protection mechanisms per repository boundaries. Missing evidence remains pending; this is not a legal compliance assessment.
Criterion and evidence
Applies to entities under repository-defined DORA scope. Scope: Backup storage segregation/protection per repository topic boundaries. Evidence period: Current operational period. Required evidence: Documentation of isolation mechanisms (e.g., network segmentation, access controls). Negative: Shared infrastructure without controls. Missing evidence: Pending. Note: Repository template, not verified legal source.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Backup, restoration and recovery. Protect backup copies and demonstrate restoration and recovery against stated objectives. Cover backup scope, segregation and protection, restoration testing, recovery priorities/objectives, redundant capacity and reconciliation of recovered information. Keep business continuity policy in SFS 8 and evidence of real execution separate from proposed procedures. DORA article references: 12. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What constitutes sufficient evidence for segregated storage environments?
Documented evidence demonstrating physical or logical isolation (e.g., separate infrastructure, network segmentation) as specified in repository topic boundaries. Evidence must detail implementation within current operational period. Note: Based on repository content, not legal verification.
References
DORA: Backup, restoration and recovery