2 cissp ® Official Study Guide Eighth Edition

716
Chapter 16 
■
Managing Security Operations
Tape Media
Organizations commonly store backups on tapes, and they are highly susceptible to loss 
due to corruption. As a best practice, organizations keep at least two copies of backups. 
They maintain one copy onsite for immediate usage if necessary, and store the second copy 
at a secure location offsite. If a catastrophic disaster such as a fire destroys the primary 
location, the data is still available at the alternate location.
The cleanliness of the storage area will directly affect the life span and usefulness of tape 
media. Additionally, magnetic fields can act as a degausser and erase or corrupt data on the 
tape. With this in mind, tapes should not be exposed to magnetic fields that can come from 
sources such as elevator motors and some printers. Here are some useful guidelines for 
managing tape media:
■
Keep new media in its original sealed packaging until it’s needed to protect it from dust 
and dirt.
■
When opening a media package, take extra caution not to damage the media in any 
way. This includes avoiding sharp objects and not twisting or flexing the media.
■
Avoid exposing the media to temperature extremes; it shouldn’t be stored close to heat-
ers, radiators, air conditioners, or other sources of extreme temperatures.
■
Do not use media that has been damaged, exposed to abnormal levels of dust and dirt, 
or dropped.
■
Media should be transported from one site to another in a temperature-controlled 
vehicle.
■
Media should be protected from exposure to the outside environment; avoid sunlight, 
moisture, humidity, heat, and cold. It should be acclimated for 24 hours before use.
■
Appropriate security should be maintained over media from the point of departure 
from the backup device to the secured offsite storage facility. Media is vulnerable to 
damage and theft at any point during transportation.
■
Appropriate security should be maintained over media throughout the lifetime of the 
media based on the classification level of data on the media.
■
Consider encrypting backups to prevent unauthorized disclosure of data if the backup 
tapes are lost or stolen.