Choose the right solution

September 2011 Information Security

In today’s digital age, regulations around data retention are becoming of increasing concern to businesses of all sizes across industry sectors. While the duration of requirements for retention may vary from industry to industry, the South African Revenue Service requires that documents be kept for a minimum of five years for tax and auditing purposes, which means that often large amounts of digital data must be archived for at least this minimum prescribed period.

Aside from legal compliance issues, the ever increasing amounts of digital data are placing added burden on backup solutions. This data often contains business critical information, which means that adequate backup and recovery solutions have become vital technology in ensuring business continuity in the event of disaster.

However, taking a blanket approach to backup and archiving of digital data is simply not a smart option, since the sheer volumes of information sent over digital channels can cost organisations a fortune in storage space. It is vital to decide which information is relevant and which is not, so that only important information is backed up. It is also important to ensure that data is not duplicated, as storing multiple copies of the same information takes up unnecessary storage space.

The latest backup and archiving technology can be of great assistance, with advances such as deduplication, ensuring that multiple copies of data are eliminated and intelligent archiving solutions automating the indexing process to create searchable archives on a highly granular level, ensuring that documents and data that are stored can easily be located if necessary.

Technology, however, can only do so much on its own. In order to ensure effective and efficient backup of data, policies need to be put into place to set the parameters for what is being backed up and when, and how often to run incremental backups as opposed to full backups. Policies should also dictate what happens to the backed-up data, whether it is archived on disks or on tapes and whether the backup data is stored on or offsite, and for how long this data must be stored depending on relevant compliance legislation.

These policies should cover not only data such as e-mails and business critical documentation, but also aspects such as identity management profiles and access control information, in order to ensure security. If the system crashes and needs to be restored from the backup, this data is crucial in ensuring that security breaches resulting from unauthorised access do not occur, since all of the information relating to who is able to access what information can be immediately resumed during the recovery process.

When it comes to best practice around backup and archiving, setting up the correct policies is a crucial step. It also needs to be remembered however that the policy document is not a static object, and needs to be continuously updated to ensure that it is in line with the current requirements of the organisation, both in terms of business and compliance needs.

The latest technology is also recommended as part of best practice, since advances in solutions can provide more efficient backup that uses less space and costs less money in the long term, and can help organisations to ensure that the right data is being backed up at the right time through an automated system that eliminates the potential for human error.

Testing the restoration functionality on a regular basis is another vital element. It is all very well to have masses of data backed up, but organisations must be able to restore this data quickly in the event of a disaster, to make sure that the business is back up and running in short order to minimise lost productivity.

Finally, when it comes to implementing any backup and archiving system, it is always advisable to speak to an expert in the field. This will help to ensure that the right system is put into place, that the solution is set up correctly for maximum efficiency, and that policies can be put into place that are effective for each individual organisation.

Backup and archiving are a vital part of the modern business, but if the wrong products are used or solutions are not correctly implemented, this aspect of IT can end up attracting unnecessary expense. Following best practice and the advice of a skilled and experienced expert can help organisations to ensure that the right data is always securely backed up and can be quickly restored if necessary, minimising damage to the business.

Fred Mitchell
Fred Mitchell

For more information contact Drive Control Corporation, +27 (0)11 201 8927, [email protected]





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The impact of AI on security
Technews Publishing Information Security AI & Data Analytics
Today’s threat actors have moved away from signature-based attacks that legacy antivirus software can detect, to ‘living-off-the-land’ using legitimate system tools to move laterally through networks. This is where AI has a critical role to play.

Read more...
Managed security solutions for organisations of all sizes
Information Security
Cyberattackers have become significantly more sophisticated and determined, targeting businesses of all sizes. PwC’s Global Digital Trust Insights Survey 2025 Africa and South Africa highlights the urgent need for organisations to implement robust cyber risk mitigation strategies.

Read more...
Multiple IoT devices targeted
Information Security Residential Estate (Industry)
Mirai remains one of the top threats to IoT in 2025 due to widespread exploitation of weak login credentials and unpatched vulnerabilities, enabling large-scale botnets for DDoS attacks, data theft and other malicious activities.

Read more...
Local-first data security is South Africa's new digital fortress
Infrastructure Information Security
With many global conversations taking place about data security and privacy, a distinct and powerful message is emerging from South Africa: the critical importance of a 'local first' approach to data security.

Read more...
Sophos launches advisory services to deliver proactive cybersecurity resilience
Information Security News & Events
Sophos has launched a suite of penetration testing and application security services, designed to identify gaps in organisations’ security programs, which is informed by Sophos X-Ops Threat Intelligence and delivered by world-class experts.

Read more...
Kaspersky highlights biometric and signature risks
Information Security News & Events
AI has elevated phishing into a highly personalised threat. Large language models enable attackers to craft convincing emails, messages and websites that mimic legitimate sources, eliminating grammatical errors that once exposed scams.

Read more...
Software security is a team sport
Information Security Infrastructure
Building and maintaining secure software is not a one-team effort; it requires the collective strength and collaboration of security, engineering, and operations teams.

Read more...
Stronger cloud protection
Kaspersky Information Security Products & Solutions
Kaspersky has announced the release of an enhanced version of its Kaspersky Cloud Workload Security, delivering advanced protection for hybrid and multi-cloud environments.

Read more...
AttackIQ enters South Africa with key appointment
Information Security News & Events
AttackIQ, a provider of continuous security validation and exposure management, has announced its entry into the South African market with the appointment of Luke Cifarelli as its country manager.

Read more...
Managed security solutions for organisations of all sizes
Information Security News & Events
Cyber attackers have become significantly more sophisticated and determined, targeting businesses of all sizes. PwC’s Global Digital Trust Insights Survey 2025 Africa and South Africa highlights the urgent need for organisations to implement robust cyber risk mitigation strategies.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.