178
The following items must be taken into account, confirmed and stated in
sufficient detail in the contract:
4.3.1
Sufficiently detailed rules on mirroring of application data, and
failover. Procedures for ensuring permanent for data availability.
4.3.2
Sufficiently detailed provisions on data backups and archiving
(
e.g., when, how often, how long, and duration of the restore,
storage of the storage media), rules for the safekeeping of the
backup media (e.g., spatial separation, backup encryption schema,
and provisions on customer access to data backups), rules for the
deletion of the data and returning the data media after the
termination of the agreement, provision for demonstrable
deletion of customer data.
