Database Backup Standards

Standard Metadata

• Area: Security
• Owner: Security group
• Last reviewed: 2026-09-09
• Next review due from: 2026-12-01
• Enforcement: Code review
• Status: Active

Overview

An effective database backup strategy ensures that, in the case of database deletion, unavailability, or corruption, a system can promptly recover by using a recent backup, thereby minimising business disruption.

A database backup strategy must be implemented in production environments · SEC-03.1 · MUST · DEV

For production environments where Audacia is responsible for a system’s infrastructure, a database backup strategy must be agreed with the client and documented in the project’s wiki.

Any backup strategy must enable compliance with any applicable data privacy legislation · SEC-03.2 · MUST · DEV

If a database contains personally identifiable information, a process must be agreed with the client to ensure that a user’s right to be forgotten under GDPR legislation is honoured. In the event of a database backup being recovered, any user who has requested to be forgotten must have their information removed.