[non-validated] DORA SFS 9 / SF 6: Backup Storage Segregation
Generated catalog draft. No operational assessment or human approval is claimed.
[non-validated] This question has unresolved selected work.
Question
[non-validated] Has the entity implemented segregated and protected storage environments for backup copies to maintain their integrity and availability per DORA Article 12 requirements?
Explanation
[non-validated] Assess whether designated entities maintain segregated and protected backup storage environments per DORA Article 12 requirements. Evidence must demonstrate physical/logical isolation and access controls for backup copies during the operational period. Missing evidence remains pending; this is not an assessment of actual compliance.
Criterion and evidence
Verify documented segregation of backup storage environments per DORA Article 12, covering physical/logical isolation and integrity mechanisms. Pending verification against repository topic boundaries without current statutory validation.
AI assistance prompt
Develop sixteen bounded yes/no factors for DORA: Backup, restoration and recovery. Protect backup copies and demonstrate restoration and recovery against stated objectives. Cover backup scope, segregation and protection, restoration testing, recovery priorities/objectives, redundant capacity and reconciliation of recovered information. Keep business continuity policy in SFS 8 and evidence of real execution separate from proposed procedures. DORA article references: 12. Verify entity-role applicability and current primary sources. Missing evidence stays pending; no compliance or assessment is implied.
Clarifications
What evidence suffices for segregation?
Documented technical configurations showing backups stored in separate network/physical environments with access controls. Same-segment storage without encryption fails per failed-0096 fixture.
How are missing controls handled?
Pending status applies when evidence of segregated storage is absent. No alternatives satisfy the requirement per article 12 boundaries.
References
DORA: Backup, restoration and recovery