No backup System
Risk Description
A negligent employee may forget to regular backup data or fail to verify that backup procedures. When natural or software errors disasters happen, and the absence of backups makes it impossible to restore the data to its previous state, causing potential business disruptions and data loss.
Existing Controls
No control
Risk Mitigation Policy
- Determine the programs, files, data and systems to be backed up.
- Perform a backup application procedure (path, permissions, backup type, time, backup location).
- Perform a procedure to guide the restoration of backups.
- Perform periodic testing procedures on backup files to ensure their integrity, which is important for recovery after a disaster.
- Storage backups in multiple locations.
Location/Contact Person details
The chairman of risk management sub-committee in UTAS-SUR
Dr.Sami Al-Batashi, Phone: +968 9293 9604
Email: sami.albattashi@utas.edu.om
Risk Management Authority
Risk Management Committee in UTAS-SUR
Risk Likelihood
High
Risk Impact
High
Risk Level
High
Risk Incident Response Procedures
- Immediately assess the impact of data loss or system failure.
- Notify IT and relevant departments to initiate emergency recovery measures.
- Identify the root cause and implement temporary solutions to minimize disruption.
- Reduce service drop time and return quickly.
- Reduce physical losses and data loss.
- Restore affected systems and data.
- Document the incident and develop a backup implementation plan to prevent future occurrences.
Risk Termination
By sending the final report explaining the problem causes and how we can mitigate next time.