Backup Guidance

Owned by Michael Peters
May 26, 2021
3 min read

There are several locations for data backups within the Continuum GRC ecosystem.

Continuum GRC maintains a baseline configuration in the ITAM quality assurance test environment. Additionally, all systems are backed up on a daily basis and archived to preserve baseline configurations.

 

Continuum GRC conducts backups of user-level information contained in the ITAM application environment incremental daily and full weekly.

The ITAM application environment backup is performed daily and is always a full system backup. User specific databases are backed up daily and are always a full backup.

Each system has a daily cron task script to produce a daily full backup of user-level data. This data is stored locally for six (6) days until the AWS GovCloud Backup makes a full system image and stores it in the AWS GovCloud West and East regions simultaneously. Backups are maintained for two months at which time the older is replaced by the newest. After five (5) days, each system transfers the local backup to the in-boundary Bastion system for additional backup protections.

Continuum GRC conducts backups of system-level information contained in the ITAM application environment incremental daily and full weekly.

The ITAM application environment backup is performed daily and is always a full system backup.

Each system has a daily cron task script to produce a daily full backup of system-level data. This data is stored locally for six (6) days until the AWS GovCloud Backup makes a full system image and stores it in the AWS GovCloud West and East regions simultaneously. Backups are maintained for two months at which time the older is replaced by the newest. After five (5) days, each system transfers the local backup to the in-boundary Bastion system for additional backup protections.

Associated location: /ITAM-Encrypted/archives/

Associated location: /mnt/ITAM-Encrypted/archives/

Associated location: /root/mysql/

Continuum GRC conducts backups of information system documentation including security-related documentation using daily incremental and weekly full.

All information system documentation produced by the Company, is maintained in the Google Workspace storage, and replicated internally on the corporate file system storage.

The ITAM application environment backup is performed daily and is always a full system backup.

Each system has a daily cron task script to produce a daily full backup of system documentation data. This data is stored locally for six (6) days until the AWS GovCloud Backup makes a full system image and stores it in the AWS GovCloud West and East regions simultaneously. Backups are maintained for two months at which time the older is replaced by the newest.


Continuum GRC protects the confidentiality, integrity, and availability of backup information at storage locations.

The ITAM application environment storage location is within the boundary and inherits the existing protections. Currently, the production systems are in the AWS GovCloud-West zone and the alternative storage site is in AWS GovCloud-East.

The system protects the confidentiality, integrity, and availability of backup information by maintaining it within the AWS GovCloud production environment. Backup are in encrypted cold storage inaccessible to anyone except AWS GovCloud management administrators.