Backup & Recovery Policy

Document Ref: ISMS-POL-BR-01
Version: 1.0
Owner: Co-Chair
Effective Date: 01 January 2026

Pretzel Films Ltd maintains backup and recovery procedures to ensure that business-critical information and client materials can be restored in the event of data loss, technical failure or security incident.

Purpose

The purpose of this policy is to ensure that information assets are protected through reliable backup practices and that recovery procedures exist to restore data when required.

Scope

This policy applies to all company information assets including:

• Production files and project materials
• Client deliverables
• Internal documents and communications
• Cloud-based systems and shared drives
• Local storage used during production workflows

Backup Strategy

Pretzel Films Ltd operates a hybrid backup approach combining cloud-based storage with offline backup copies.

Backup methods may include:

• Cloud storage and collaboration platforms (such as Google Workspace)
• Encrypted external solid-state drives (SSD)
• Duplicate backup copies maintained where appropriate

This approach helps ensure that production data and business records remain recoverable in the event of system failure or accidental loss.

Backup Controls

To maintain reliable backup practices, Pretzel Films Ltd implements the following controls:

• Important files are stored in secure cloud services where possible
• Production files may be duplicated onto encrypted external storage
• Backup media is protected against unauthorised access
• Access to backups is restricted to authorised personnel

Recovery Process

In the event of data loss or system failure, the following recovery steps are followed:

• Identify the affected system, data or device
• Confirm the most recent reliable backup
• Restore files or systems from the backup location
• Verify that restored data is complete and operational

Where necessary, recovery actions may form part of the broader incident response process.

Testing and Verification

Backup and recovery processes are periodically reviewed to ensure that data can be restored when required.

Testing may include:

• Verifying that backup copies are accessible
• Testing restoration of selected files
• Reviewing backup procedures during internal audits

Responsibilities

Co-Chairs

• Oversee backup strategy and data protection practices
• Approve backup procedures and recovery planning

Employees and Contractors

• Ensure project files are stored in approved storage locations
• Follow data protection and backup procedures
• Report suspected data loss immediately

Reporting Data Loss

If data loss, corruption or backup failure is suspected, the issue must be reported promptly.

Continuous Improvement

Pretzel Films Ltd reviews backup and recovery practices periodically to ensure they remain appropriate for business needs, technological changes and evolving security risks.

Approval