Zum Inhalt springen

Backup and Disaster Recovery Overview

This document outlines the backup, disaster recovery (DR), and system management details for the proposed solution.

1. Backup Solution

  • Solution Used: AWS Backup

  • Encryption: All backup data is encrypted. The encryption key is securely stored within AWS Key Management Service (AWS KMS).

2. Backup Frequency & Retention

  • Frequency: Daily

  • Retention Policy: 1 backup per day retained for 35 days

3. Backup Storage Location

  • All backups are securely stored in an AWS Backup Vault.

4. Disaster Recovery (DR) Process

  • Restoration Method: Full SaaS recovery

  • DR Provider: Vendor (imc) -provided DR recovery – no customer action required

5. System Management

  • Ongoing Management: Included by the vendor (imc) as part of the service

  • Administrator Access: Not required – Full SaaS solution eliminates the need for direct system login

6. Monitoring & Maintenance

  • Monitoring: Included within the Full SaaS service (handled by vendor/imc)

  • Patching: Managed by the vendor (imc); updates applied automatically as part of the service lifecycle

7. RTO and RPO

  • RPO (Recovery Point Objective): Data is backed up daily using AWS Backup. In the event of a disaster, the maximum data loss is therefore up to 24 hours. The backups are encrypted, and the keys are managed in the AWS Key Management Service (KMS). The backups are stored in a dedicated AWS Backup Vault and retained for 35 days.
  • RTO (Recovery Time Objective): Recovery is carried out entirely by imc as part of the SaaS service; no action is required on your part. The duration of the recovery depends on the volume of data to be restored. As a guideline, you can expect this to take approximately 8 hours during our business hours (Monday to Thursday, [08:00–17:00], Fridays [08:00–14:00] excluding Austrian public holidays). In the event of incidents occurring outside business hours, recovery will commence on the next working day.

Summary

This Full SaaS solution ensures reliable daily backups, secure encrypted storage, vendor-managed DR capabilities, and automatic system maintenance—allowing customers to focus on their operations without the burden of technical management.