A1.2

Authorizes, designs, develops, implements, operates, approves, maintains, and monitors environmental protections, software, data backup, and recovery infrastructure

AvailabilityPartialAvailability

Control description

AICPA Trust Services Criteria

The entity authorizes, designs, develops or acquires, implements, operates, approves, maintains, and monitors environmental protections, software, data backup processes, and recovery infrastructure to meet its objectives.

Auditor test plan

How this is tested during the audit

Auditor inspects the backup schedule, encryption of backups, and a sample of completed restore tests.

Evidence

1 item attached to this control

Open vault →

PDF
backup-restore-test-2026-03.pdf
sha256:0000000000000000… · 184.0 KB · 44d ago

Last reviewed

44d

Within 180-day window

Evidence on file

Owner

VP Engineering

Accountable for design + operating effectiveness

Status timeline

Recent control history

Last reviewed by VP Engineering
44d ago
Remediation plan opened
58d ago
Auditor flagged design gap
104d ago