e) The backup site must also be sufficiently distance from the primary site to avoid being subject to the same set of risk as the primary location, but at the same time, close enough for retrieval process to be done quickly within a reasonable time frame.
f) A full system backup must be periodically conducted and must at least consist of (but not limited to); the updated version of the operating system software, production programs, system utilities, network security devices and all master and transaction files.
g) The frequency of backup must depend on its criticality and agreed business users, but must be performed after critical modification or updates.