Point-in-time recovery
Every namespace restores to any past moment from its kept record, and a restore test runs each week.
Satisfies
| Criterion | Text |
|---|---|
| SOC2 A1.2 | The entity designs, operates, monitors and maintains environmental protections, backups and recovery infrastructure. |
| SOC2 A1.3 | The entity tests the recovery plan procedures that support system recovery. |
| SOC2 CC7.5 | The entity identifies, develops and performs activities to recover from identified security incidents. |
| SOC2 CC9.1 | The entity identifies, selects and develops risk mitigation activities for risks from potential business disruptions. |
| ISO27001 A.8.13 | Backup copies of information, software and systems are maintained and tested on a set schedule. |
| ISO27001 A.5.29 | Information security holds at an appropriate level during a disruption. |
| ISO27001 A.5.30 | Technology readiness for business continuity is designed, implemented, maintained and tested. |
| HIPAA 164.308(a)(7) | The entity keeps a contingency plan with data backup, disaster recovery and emergency mode operation. |
Implemented by
Test
| Step | Rule |
|---|---|
| Kind | Detective: it finds the failure after it happens. |
| Select | Every weekly restore test in the report period. |
| Assert | Each restored a sampled namespace to a past moment within its recovery time target, with records matching the root. |
Owner
Reliability Engineer, Engineering Team.
Example
The weekly test restores a sampled tutoring marketplace to 14:00 eight days ago in 6 minutes, under its 15-minute target. The restored records match that hour's root.