Backups and recovery
Encrypt every database backup, keep point-in-time recovery where data changes all day, and prove each backup restores. Schedules and targets live in operations.
- Required 2
- Recommended 1
Required
Encrypt backups
RequiredEncrypt every backup before it leaves the server, and keep the key apart from the backups.
Prove restores work
RequiredRestore a backup on a schedule and check the result. An untested backup is a hope, not a backup.
Recommended
Keep point-in-time recovery for busy databases
RecommendedWhere losing a day of writes is not acceptable, keep the database's change log, so you can restore to any moment.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers data playbook: https://agentwranglers.se/playbook/data/backups-and-recovery.