Backups necessary to facilitate business continuity
must be stored in an environmentally protected
and access controlled site separate
from the location where the source data resides
Non business continuity related backups
exam end user performed backups
must be stored in a secure manner