Choose the right solution

September 2011 Information Security

In today’s digital age, regulations around data retention are becoming of increasing concern to businesses of all sizes across industry sectors. While the duration of requirements for retention may vary from industry to industry, the South African Revenue Service requires that documents be kept for a minimum of five years for tax and auditing purposes, which means that often large amounts of digital data must be archived for at least this minimum prescribed period.

Aside from legal compliance issues, the ever increasing amounts of digital data are placing added burden on backup solutions. This data often contains business critical information, which means that adequate backup and recovery solutions have become vital technology in ensuring business continuity in the event of disaster.

However, taking a blanket approach to backup and archiving of digital data is simply not a smart option, since the sheer volumes of information sent over digital channels can cost organisations a fortune in storage space. It is vital to decide which information is relevant and which is not, so that only important information is backed up. It is also important to ensure that data is not duplicated, as storing multiple copies of the same information takes up unnecessary storage space.

The latest backup and archiving technology can be of great assistance, with advances such as deduplication, ensuring that multiple copies of data are eliminated and intelligent archiving solutions automating the indexing process to create searchable archives on a highly granular level, ensuring that documents and data that are stored can easily be located if necessary.

Technology, however, can only do so much on its own. In order to ensure effective and efficient backup of data, policies need to be put into place to set the parameters for what is being backed up and when, and how often to run incremental backups as opposed to full backups. Policies should also dictate what happens to the backed-up data, whether it is archived on disks or on tapes and whether the backup data is stored on or offsite, and for how long this data must be stored depending on relevant compliance legislation.

These policies should cover not only data such as e-mails and business critical documentation, but also aspects such as identity management profiles and access control information, in order to ensure security. If the system crashes and needs to be restored from the backup, this data is crucial in ensuring that security breaches resulting from unauthorised access do not occur, since all of the information relating to who is able to access what information can be immediately resumed during the recovery process.

When it comes to best practice around backup and archiving, setting up the correct policies is a crucial step. It also needs to be remembered however that the policy document is not a static object, and needs to be continuously updated to ensure that it is in line with the current requirements of the organisation, both in terms of business and compliance needs.

The latest technology is also recommended as part of best practice, since advances in solutions can provide more efficient backup that uses less space and costs less money in the long term, and can help organisations to ensure that the right data is being backed up at the right time through an automated system that eliminates the potential for human error.

Testing the restoration functionality on a regular basis is another vital element. It is all very well to have masses of data backed up, but organisations must be able to restore this data quickly in the event of a disaster, to make sure that the business is back up and running in short order to minimise lost productivity.

Finally, when it comes to implementing any backup and archiving system, it is always advisable to speak to an expert in the field. This will help to ensure that the right system is put into place, that the solution is set up correctly for maximum efficiency, and that policies can be put into place that are effective for each individual organisation.

Backup and archiving are a vital part of the modern business, but if the wrong products are used or solutions are not correctly implemented, this aspect of IT can end up attracting unnecessary expense. Following best practice and the advice of a skilled and experienced expert can help organisations to ensure that the right data is always securely backed up and can be quickly restored if necessary, minimising damage to the business.

Fred Mitchell
Fred Mitchell

For more information contact Drive Control Corporation, +27 (0)11 201 8927, [email protected]





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Want effective Attack Surface Management? Think like an attacker.
Information Security
Effective ASM requires companies to think like attackers, anticipate risks, and act decisively to reduce exposure by knowing their environment, deploying a structured approach, leveraging capable tools, and addressing both internal and external risks.

Read more...
The growing role of hybrid backup
Infrastructure Information Security
As Africa’s digital economy rapidly grows, businesses across the continent are facing the challenge of securing data in an environment characterised by evolving cyberthreats, unreliable connectivity and diverse regulatory frameworks.

Read more...
POPIA non-compliance puts municipalities at risk
Information Security Government and Parastatal (Industry)
Digital responsibility must go beyond POPIA compliance to recognising that privacy and service delivery are fundamentally linked. Despite this, only 51 out of 257 municipalities submitted their mandatory data protection and access to information reports in 2024.

Read more...
Choicejacking bypasses smartphone charging security
News & Events Information Security
Choicejacking is a new cyberthreat that bypasses smartphone charging security defences to confirm, without the victim’s input or consent, that the victim wishes to connect in data-transfer mode.

Read more...
Most wanted malware
News & Events Information Security
Check Point Software Technologies unveiled its Global Threat Index for June 2025, highlighting a surge in new and evolving threats. Eight African countries are among the most targeted as malware leaders AsyncRAT and FakeUpdates expand.

Read more...
Welcome to the new cyber battleground
Information Security
The Iran-Israel conflict is rapidly redefining modern warfare, pushing the boundaries of cyber capabilities and creating a new, borderless digital battlefield. Fortinet’s CISO, Dr Carl Windsor, offers a critical, in-depth analysis of the escalating tactics and global implications in his latest report.

Read more...
African industries may overestimate cyber defences
Information Security
A significant perception gap exists in security awareness training: 68% of leaders believe training is tailored to roles, yet only a third of employees feel adequately trained. Many organisations only conduct annual or biannual generic training that may not effectively change behaviour.

Read more...
SMARTpod talks to Sophos and Phishield
SMART Security Solutions Technews Publishing Sophos Videos Information Security News & Events
SMARTpod recently spoke with Pieter Nel, Sales Director for SADC at Sophos, and Sarel Lamprecht, MD at Phishield, about ransomware and their new cyber insurance partnership.

Read more...
Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Corporate and academic teams can register for Kaspersky contest
Kaspersky News & Events Information Security
Kaspersky has announced the registration opening for its new Kaspersky{CTF} (Capture the Flag) competition, inviting academic and corporate teams from around the globe to compete in a battle of skill, strategy and innovation.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.