6.1.6 Information System Backup

As part of information system backup, the following periodic activities are recommended.
  • Backup database related files such as data files, control files, redo-logs, archived files, init.ora, config.ora etc. at the end of day.
  • Take online backup of archived redo-log files periodically.
  • Do complete export of database and the application once in a week and store it off-site.
  • Take complete backup of the Oracle directory periodically, excluding the database related files.
  • When the database is huge, do incremental exports (delta or differential exports) and take online table-space backups.
  • Use RMAN secure backup to ensure that the backups stolen from the production/ deployed system cannot be restored in another remote system. Additionally, you may use data masking, a feature offered by Oracle Enterprise Manager, to move the data from the production environment to a test environment. Both the activities mentioned in this step are crucial steps towards securing confidential customer data.
  • Store the database backups for the required period as per the regulations and bank's history retention policies. Store these backups securely with access given only to authorized users.