Introduction This policy defines the backup guidelines for systems within the Central Dauphin School District. These systems are typically servers, Storage Area Network devices (SAN), or Network-Attached Storage devices (NAS) but can include other devices. All Servers utilized by the Central Dauphin School District are to be backed up at intervals defined by their role and level of critical information stored on the Server. Purpose To safeguard the information assets of Central Dauphin School District. To prevent the loss of data in the case of an accidental deletion or corruption of data, system failure, or disaster. To permit timely restoration of information should such events occur. To manage and secure backup and restoration processes and the media employed in the process. Detailed Policy Statement The will designate one of its staff members as the backup manager. The backup manager will be responsible for setting up, monitoring, and verifying backup and restore jobs according to the following guidelines. All Servers deployed in the Central Dauphin School District are classified under one of 14 possible categories: Application Server Backup Server Database Server Management/Monitoring Devices Domain Controller Exceptions Email Server Fax Server File Server Print Server Task Server VM Server Voice Mail Server Web Server Back up schedules are based on the above categories with the exception of the key enterprise systems, which have additional daily backups performed to optimize recovery. Daily backup jobs are completed on an appliance unit while monthly backup jobs are completed onto tapes housed in the tape library. Systems will be backed up according to the schedule below: SAN & NAS Appliances o All data stored on the SAN and/or NAS appliances are attached to other servers and will be backed up during those servers back up periods. Backup Policy (ITP004) Page 1 of 5 Revised Date: 21-Apr-14
Application Servers will be regularly backed up as follows: Enterprise Systems o Incremental (Tues-Sat) Other Application Servers o Full backup at least once a week Backup Servers will be regularly backed up as follows: o Incremental Tues-Sat. Database Servers will be regularly backed up as follows: o Incremental (Tues-Sat) o Database snapshots twice daily Domain Controllers will be regularly backed up as follows: o Full backup twice a week Email Server stores will be regularly backed up as follows: o Physical Mail Servers Full backup daily o Physical Mail Archive Full backup twice a week Note: Individual mailboxes are not backed up; only mailbox stores. Exceptions will be regularly backed up as follows: Fax Server will be regularly backed up as follows: o Full backup once a week o Full Backup monthly File Servers will be regularly backed up as follows: o Incremental Backup (Tues-Sat) Monitoring/Management Servers will be regularly backed up as follows: o Full backup at least once a week Print Servers will be regularly backed up as follows: o Full backup twice a week Backup Policy (ITP004) Page 2 of 5 Revised Date: 21-Apr-14
o Full backup once a week Task Servers will be regularly backed up as follows: Enterprise Systems o Incremental backup (Tues-Sat) Other Task Servers o Full backup once a week Voice Mail Servers will be regularly backed up as follows: Web Servers will be regularly backed up as follows: o Incremental Backup (Tues-Sat) The daily backups are stored in the data center on an appliance and then replicated to an identical appliance located offsite. Locally stored backups are held for approximately four weeks and then archived to tape. Tapes are stored in a fire proof safe for a period of one year. Media will be retired and disposed of as related to Information Technology Disposal of Digital Media Policy (ITP007).. Any failure that occurs during a backup job is emailed to the designated backup manager daily, and any failures will be addressed on that same day. Once a quarter two random servers will be selected for a complete disaster recovery in order to test the full recovery of systems. Information Technology Services will maintain electronic records demonstrating the corrective action of failed backups and test restores so as to demonstrate compliance with this policy for auditing purposes. In addition, Information Technology Services will identify problems and take corrective action to reduce any risks associated with failed backups. Data Recovery: In the event of a catastrophic system failure, off-site backed up data will be made available to users within 3 to 5 business days after the destroyed equipment has been replaced. In the event of a non-catastrophic system failure or user error, on-site backed up data will be made available to users within 1 to 2 business days. Applicability This policy applies to any and all staff. It is critical to the functionality of the district that any person who fails to adhere to this policy may be subject to disciplinary action up to and including dismissal. Backup Policy (ITP004) Page 3 of 5 Revised Date: 21-Apr-14
Definitions Application Server Servers that house specific applications utilized throughout the district. Backup Server--A server responsible for backing up and restoring files, folders, databases and hard drives on a network in order to prevent the loss of data in the event of a hard drive failure, user error, disaster or accident. Database Server Servers that house specific databases for district applications. Monitoring/Management Servers A machine performing management or monitoring systems or system access. Domain Controller A server on a Microsoft Windows or Windows NT network that is responsible for allowing host access to Windows domain resources. Exceptions Serves not backed up by current district backup solution. Servers added to classification either use application backup feature or are performed manually due to legacy equipment. Email Server Server that houses district email or client access to email. Fax Server Server that houses district on-line faxing application. File Server--Servers responsible for the central storage and management of data files so that other computers and end users on the same network can access the files. Enterprise Systems Servers employed for critical operations including financial system, student system, and special services system. NAS--Network-attached storage (NAS) is hard disk storage that is set up with its own network address rather than being attached to a department computer that is serving applications to a network's users. Other Server Designation Data on these servers does not change frequently. Print Server--Servers that manage print requests and make printer queue status information available to end users and network administrators. SAN--A storage area network (SAN) is a high-speed special-purpose network (or sub network) that interconnects different kinds of data storage devices with associated data servers on behalf of a larger network of users. Task Server--Servers that manage task requests and make the job status information available to end users and network administrators. Voice Mail Server Servers that house building voice mail. Web Server Servers that host websites on the district s intranet. Cognizant Office For interpretations, resolution of problems and specific situations contact: The Director of Technology Services at (717) 545-4703 x285 or itsdirector@cdschools.org. Policy Authority Central Dauphin School District Technology Steering Committee Related policies and Procedures Backup Policy (ITP004) Page 4 of 5 Revised Date: 21-Apr-14
Board Policy, 801.1 Records Retention and Destruction. Information Technology Disposal of Digital Media Policy (ITP007). Implementation Procedures Information Technology Backup Procedure (IPR004). Backup Policy (ITP004) Page 5 of 5 Revised Date: 21-Apr-14