Page 1319 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

offsite location managed within the company or by a contractor for the
purpose of maintaining backup data.

If you use electronic vaulting, remember that there may be a

significant delay between the time you declare a disaster and the time
your database is ready for operation with current data. If you decide to
activate a recovery site, technicians will need to retrieve the
appropriate backups from the electronic vault and apply them to the
soon-to-be production servers at the recovery site.

Be careful when considering vendors for an electronic

vaulting contract. Definitions of electronic vaulting vary widely
within the industry. Don’t settle for a vague promise of “electronic
vaulting capability.” Insist on a written definition of the service
that will be provided, including the storage capacity, bandwidth of
the communications link to the electronic vault, and the time

necessary to retrieve vaulted data in the event of a disaster.

As with any type of backup scenario, be certain to periodically test
your electronic vaulting setup. A great method for testing backup
solutions is to give disaster recovery personnel a “surprise test,” asking
them to restore data from a certain day.

It’s important to know that electronic vaulting introduces

the potential for significant data loss. In the event of a disaster, you
will only be able to recover information as of the time of the last
vaulting operation.

Remote Journaling

With remote journaling, data transfers are performed in a more
expeditious manner. Data transfers still occur in a bulk transfer mode,
but they occur on a more frequent basis, usually once every hour and
sometimes more frequently. Unlike electronic vaulting scenarios,
where entire database backup files are transferred, remote journaling