SFS 2: Backup and Disaster Recovery Plan
Assess whether documented backup and recovery arrangements can restore the required services and data within defined recovery objectives.
Scope and boundaries
This set covers continuity planning, backup ownership, protected backup copies, restoration procedures, service dependencies, and recovery exercises. It distinguishes having a backup configuration from demonstrating that a restoration succeeded. Questions should state the service boundary, required recovery objectives, evidence period, and conditions for a successful test. Evidence may include recovery plans, backup job records, and restoration reports. Routine storage management and retention belong to SFS 4; incident coordination belongs to SFS 6.
The sixteen questions
This set has sixteen SF positions, 0–F. Each position is one question, not another set. All questions below are unreviewed placeholders; no assessment result has been recorded.
| SF | Question page | Authoring record | Status |
|---|---|---|---|
0 | SF 0: placeholder | 0020 | Draft; result unset |
1 | SF 1: placeholder | 0021 | Draft; result unset |
2 | SF 2: placeholder | 0022 | Draft; result unset |
3 | SF 3: placeholder | 0023 | Draft; result unset |
4 | SF 4: placeholder | 0024 | Draft; result unset |
5 | SF 5: placeholder | 0025 | Draft; result unset |
6 | SF 6: placeholder | 0026 | Draft; result unset |
7 | SF 7: placeholder | 0027 | Draft; result unset |
8 | SF 8: placeholder | 0028 | Draft; result unset |
9 | SF 9: placeholder | 0029 | Draft; result unset |
A | SF A: placeholder | 002A | Draft; result unset |
B | SF B: placeholder | 002B | Draft; result unset |
C | SF C: placeholder | 002C | Draft; result unset |
D | SF D: placeholder | 002D | Draft; result unset |
E | SF E: placeholder | 002E | Draft; result unset |
F | SF F: placeholder | 002F | Draft; result unset |
From questions to a profile
Only reviewed, accepted 0/1 assessments can populate the sixteen-bit set profile. SF 0 is the most significant bit and SF F is the least significant bit. The completed result uses four hexadecimal digits, including leading zeros. There is no completed profile for this draft set.
Read assessment and validation, then encoding. A set profile preserves individual answers; it is not a summed security score.