Backup

6.9.3.1Information backup The control, implementation guidance and other information stated in ISO/IEC 27002:2013, 12.3.1 and the following additional guidance applies:

APP (Australian Privacy Principles)

APP.11.1: Must take reasonable steps to protect personal information held from misuse, interference and loss, unauthorised access, modification or disclosure (APP 11.1)

PIPEDA (Personal Information Protection and Electronic Documents Act) - Canada

4.7: Personal information must be protected by appropriate security safeguards (4.7)

Personal Data Protection Act - Singapore

S.24: Must make reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks for personal data held or under their control