From SJA

Contents 1 Overview 2 Purpose 3 Scope 4 Procedure

Overview

The Electronic Information system of The St. John Council for Alberta (aka St. John Ambulance Alberta, SJA) represents the largest, single asset of SJA. The protection and security of the electronic information systems is critical to the very survival of SJA. To ensure the protection of the data contained within these systems, a backup procedure is required. These systems are only to be used for business purposes in serving the interests of SJA, and of our clients and customers in the course of normal operations. Effective security is a team effort involving the participation and support of every SJA employee and affiliate who deals with information and/or information systems. It is the responsibility of every computer user to know these guidelines, and to conduct their activities accordingly.

Purpose

The purpose of this policy is to outline the appropriate procedure needed to safeguard the data stored on SJA Electronic Information Systems.

Scope

This procedure is intended for persons that administer and maintain the electronic information systems of SJA. This document is superseded by the SJA Network Acceptable Use Policy.

Procedure

1. Data is to be stored on commercial-grade systems incorporating redundancy. This includes but is not limited to: RAID (Redundant Array of independent Disks) Levels 1 or 5 within storage arrays.
2. A daily backup is to be performed using backup storage media such as tape drives or other storage systems.
3. At least 2 weeks of weekly backup is to be maintained. The two most recent weeks of backup are to be stored offsite.
4. Security Concerns: backup media is to be properly secured to minimize the risk of theft..