I am currently undertaking a review of our documentation around our corporate backups.
My concern at the moment is that not enough information is documented but I cannot seem to find much information about what a backup policy should document.
Currently our policy details the following:
What media servers are used
Who is responsible for the backup media
Tape changes - When tapes are exported and imported to the tape libraries
Details on how weekly check sheets are used to document successful, error'd or failed backups.
Details on the backup failure log
Is there anything fundamentally missing from this document, it seems a bit empty to me?
Another problem I have encountered is trying to find out exactly what is being backed up and when.
I was able to get a list of all our servers from CMDB and a copy of one of the check sheets. The check sheets show which media is responsible for each backup job. However, I then had to get another list to show which which servers were getting backed up as part of which backup job.
This started to get confusing and even more so when the lists didn't match up and it took an investigation from IT to determine exactly what was being backed up and when. This identified several servers not being backup up at all.
My question relating to this part is, how should this be documented, is this kind of information documented explicitly by most other businesses?
When I started this process I expected the backup policy document to list all media servers, which media servers were responsible for which backup jobs and which servers were being backed up by each backup job - all neatly documented.