Electronic Data Backup Procedure

C

Connie82

#1
#1
Procedures

I have been given a task by my boss to see what other companies do as a backup procedure. My question is this, does anyone know what the specifications are of QS9000 regarding backups? Such as how long we have to keep tapes, how many sets of tapes we keep, etc. If anyone could help me with this, it would be appriciated! Thank you!

connie:bigwave:
 
Highly Rated Gage Tracking - Learn More
Elsmar Forum Sponsor
R

Russ

#2
#2
Backup

I see no requirement in QS for backup of data, it just makes common sense to do so though. Our procedure reads:
"Any critical data maintained on PCs is backed-up no less than one time per week. Corporate data files maintained on the mainframe are backed-up daily, and the entire system is backed-up one time per week. Back-up copies are maintained offsite."
Maybe this will help!
:bigwave:
 
Claes Gefvenberg

Claes Gefvenberg

Admin
#3
#3
Welcome to the Cove

We use this variant...

The entire mainframe is backed up on a tape device:

Daily: We use 7 tapes for this, so this backup lasts for one week

Weekly: Every sundays backup is transferred to a fireproof safe in another building. Kept for 5 weeks. (One of our sites was destroyed in a fire earlier this year. The backups were stored in a different location, and survived - An already grave situation would have been a lot worse if the data had been destroyed)

Long term: I can't remember the frequency, but we have older tapes going back many years.

It's vital to keep replaced backup equipment in working order. Old backups must be accessable.

And hey... Welcome to the Cove..

/Claes
 
Last edited:
J

JodiB

#4
#4
Same here

We do much the same. Daily backups plus then a weekly backup and then a quarterly backup. Tapes are taken home each night by an employee. (hmmm. what if they wanted to sabotage us?)

Our approved forms, templates, and procedures are set up to synchronize on everyone's computer at shutdown, so even if network is down these bits are still available.

We don't have a written procedure for this but I have asked our IT consultant to write a disaster recovery plan for us since we have identified Information Systems as a process.
 
CarolX

CarolX

Trusted Information Resource
#5
#5
Re: Procedures

Hi Connie and welcome to the Cove,


Connie82 said:

I have been given a task by my boss to see what other companies do as a backup procedure. My question is this, does anyone know what the specifications are of QS9000 regarding backups? Such as how long we have to keep tapes, how many sets of tapes we keep, etc. If anyone could help me with this, it would be appriciated! Thank you!

connie:bigwave:
Click to expand...
We are not QS9K, but we are ISO9K:1994. This issue came up during our initial assesment, and I received a minor N/C because we did not address back-up of computer records. I plugged this section into my Engineering Document Control Procedure:

5.0 BACKUP OF COMPUTERIZED RECORDS

5.1. TAPE BACKUP OF JOB MAINTENANCE SYSTEM IS PERFORMED BY ENGINEERING DAILY.

5.1.1. TAPES CREATED ON MONDAY, TUESDAY, WEDNESDAY AND FRIDAY ARE STORED ON SITE AND REUSED WEEKLY.

5.1.2. TAPES CREATED EVERY THURSDAY ARE STORED OFFSITE AND REUSED AFTER 5 WEEKS.

5.2. TAPE BACKUP OF ACCOUNTING FILES AND PROGRAMMING FILES IS PERFORMED BY DEPARTMENT LEADS WEEKLY. TAPES ARE STORED OFFSITE BY ENGINEERING AND REUSED AFTER 1 WEEK.

Our auditor position was that some of thiese files contain records, and how did we prevent damage to the records. We were doing the action, and he wanted the issue addressed in our procedure. As I said, it was a minor N/C, I tossed in these few lines, and we were good to go.

Regards,
CarolX
 
CarolX

CarolX

Trusted Information Resource
#6
#6
Re: Same here

Lucinda said:

We do much the same. Daily backups plus then a weekly backup and then a quarterly backup. Tapes are taken home each night by an employee. (hmmm. what if they wanted to sabotage us?)
Click to expand...
Lucinda,

That is pretty standard practice, removing the tapes from the premesis. Our weekly backup is removed from the premesis and stored in a fireproof lockbox in the man's home.

I wouldn't be too concerned about the sabatoge thing, your doing daily and weekly. If the guy pops a cork and it takes you a week to discover this, you have only lost a weeks worth of data.

I know there are systems that require a much more secure method (i.e. banks), but for us regulars, that should work.

Regards,
CarolX
 
E

energy

#7
#7
Two extremes

One place-we had a fireproof safe deposit box in a local bank.
One place-we had them in the IT Guys's glove compartment in his car. Neither one was an issue with the customer auditors. But, ISO, who knows? :vfunny: :ko: :smokin:
 
L

Laura - 2003

#8
#8
Amazing coincidence

We've just been thru a periodic assessment (1994) and non-conformed on back-up of data.

Our main servers are controlled and backed up by a dept...not within our scope, but the assessor went to see them, took a look at the SLA and returned satisfied..however he was not happy about remote back-ups.

Our consultants have laptops and store much of their information on their hard drives. One of the auditees confessed that he did not conduct back-ups of his hard drive data onto the network, as often as he should. He hadn't done them at all in the last six months.

He non-conformed us....as I knew he would.....and said that we needed to document a QP (fair enough) and provide evidence of audit prior to the next assessment....fair enough.

I have found a way to ensure that when a consultant plugs his laptop into a hot desk....his files will automatically back-up onto the server...I've documented this in a procedure.

Does anyone think I will need more?

Lau~.
 
E Wall

E Wall

Just Me!
Trusted Information Resource
#9
#9
What We Do...

Much the same as the others:
Backups performed Daily, Weekly, and Monthly. The monthly tape is sent off-site.
 
G

Graeme

#10
#10
nothing is forever ...

There are a lot of good and sound ideas in this thread about backup stategies. I just want to add a couple of things about off-site and long-term storage.

(1). Several people have mentioned keeping offsite backup copies in a fireproof safe. This is a great idea, PROVIDED you are using one designed and certified for data media. The great majority of fireproof safes are designed to keep the internal temperature below the ignition point of PAPER for a specified period of time. If you remember the title of a famous book by Ray Bradbury you know that the ignition point of paper is 452 degrees F. These safes do that by releasing large amounts of water from the material that forms the insulation. (hydrated something - I don't remember exactly.) The steam keeps everything (relatively) cool. There are two tiny little problems ...
  • Plastic melts at much lower temperatures, and almost all media are plastic or contain large amounts of it. (Have you ever left a CD in the back window of a car in the summer?)
  • The principal component of magnetic media is iron. Iron rusts (oxidizes). Other materials in the magnetic coating also oxidize or corrode, and do it faster in a high-temperature steam environment.
Again, the fireproof safe must be rated for use with data media, or you may wind up with a pile of melted, rusty plastic.

(2). Many organizations keep backups or other archives in long term storage for various reasons. (years or decades) If you do, you should have a policy for regularly testing and refreshing the data.
  • At regular intervals, test it to see if the data is still readable.
  • Verify that you still have the machines available to read it. (I still have one 8-inch floppy disk. Does anyone have a drive for that?)
  • Plan to copy the data to the newest available permanent storage media. (Currently CD-R or mabe DVD-R)
  • Plan to convert the information to new data formats before the old becomes unreadable.
  • Remember that all data recording media has a limited useful lifetime. There have been numerous well-documented cases of losses of old motion pictures and audio recordings because of deterioration of the film or tape. CD-R may prove to have a long life but we don't know yet.
  • Make sure that the storage environment is suitable for preserving the life of the storage media.

Above all, protect your :ca: and make your backups BEFORE you need them.
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
K Storage of Electronic Backup Data? Document Control Systems, Procedures, Forms and Templates 6
D Preservation of Electronic Data / Information Technology ISO 13485:2016 - Medical Device Quality Management Systems 5
W ISO 14155 - Electronic clinical data systems - Definition Other Medical Device Related Standards 0
somashekar Electronic data Back-up procedure, for Medical device QMS and regulatory purpose. ISO 13485:2016 - Medical Device Quality Management Systems 4
Q Is Handwritten Raw Data required to keep with Electronic Records? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 5
D Centralizing the Receiving and Storage of Electronic Customer Data Document Control Systems, Procedures, Forms and Templates 1
S Electronic Record Retention per FDA Requirements - Electronic Data Capture (EDC) Records and Data - Quality, Legal and Other Evidence 4
M Electronic Form for Collecting 5S Data Automatically Lean in Manufacturing and Service Industries 9
K Measurement Equipment with Electronic Data Collection - What type to buy? Inspection, Prints (Drawings), Testing, Sampling and Related Topics 2
V 21 CFR Part 11 Electronic Data Storage Requirements vs. Paper Records Qualification and Validation (including 21 CFR Part 11) 2
AnaMariaVR2 XML, eCTD & FDA - Electronic Information and Data Submissions US Food and Drug Administration (FDA) 1
Q Electronic Process Examples (IT Data Warehouse) Human Factors and Ergonomics in Engineering 1
A NPRD-95 "Non-electronic Parts Reliability Data" Reliability Analysis - Predictions, Testing and Standards 5
U Automotive History Of Electronic Data Interchange (EDI) World News 1
R Procedure for Control of Data, Documented & Electronic needed Document Control Systems, Procedures, Forms and Templates 3
C Electronic work instructions - recommendations for electronic data control software. Document Control Systems, Procedures, Forms and Templates 3
Q How to handle the integrity of electronic data in databases? Records and Data - Quality, Legal and Other Evidence 13
a_bardi Help me define way of control electronic data files - Logs, etc Records and Data - Quality, Legal and Other Evidence 3
Marc Controlling Electronic Data Sheets from Manufacturers, Articles and Such Like Document Control Systems, Procedures, Forms and Templates 0
Geoff Cotton TS 16949 - Control of Electronic Data Document Control Systems, Procedures, Forms and Templates 3
A Document and Data Control - We are not satisfied with electronic document security Other ISO and International Standards and European Regulations 3
Y FDA vs (EU) 2021/2226 Electronic Instructions for Use (eIFUs) US Medical Device Regulations 1
JesseE Electronic signatures FDA CFR 820 ISO 13485:2016 - Medical Device Quality Management Systems 3
D Using electronic lab notebooks in the design control process ISO 13485:2016 - Medical Device Quality Management Systems 3
S Electronic Signatures - Non-Conformance - ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 34
K Is implementing Electronic Signatures a Significant Change to the QMS? ISO 13485:2016 - Medical Device Quality Management Systems 10
D Question on electronic signatures and initials on batch records ISO 13485:2016 - Medical Device Quality Management Systems 4
H Electronic care product on patient bed side - Flammability requirements (62368-1) Hospitals, Clinics & other Health Care Providers 0
blackholequasar Price Gouging? (Electronic components) Manufacturing and Related Processes 9
H Prodigit DC Electronic Load - Drawing current but showed 0 on the screeen Manufacturing and Related Processes 0
M Design Control - Management of Electronic CAD files Design and Development of Products and Processes 14
M Correcting Electronic QMS Records AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
A Electronic forms QMS Document Control Systems, Procedures, Forms and Templates 12
S Reporting REACH - Electronic components distributor REACH and RoHS Conversations 5
K ISO 13485 and compliance of electronic signature ISO 13485:2016 - Medical Device Quality Management Systems 5
M MDR - eIFU - When you can supply an electronic IFU instead of a paper IFU EU Medical Device Regulations 6
D Advice on capturing electronic signatures ISO 13485:2016 - Medical Device Quality Management Systems 8
C Shelf life electronic components 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 2
C Cleaning of electronic transmitter Other Medical Device Related Standards 2
M Is IEC 60601-1-2 required by FDA for all electronic medical devices? IEC 60601 - Medical Electrical Equipment Safety Standards Series 1
Anonymous16-2 21 CFR Part 11 - Steps to take if we want to validate an electronic system Pharmaceuticals (21 CFR Part 210, 21 CFR Part 211 and related Regulations) 2
R Electronic and hand-written footnotes for GDP Document Control Systems, Procedures, Forms and Templates 1
A 21 CFR part 11 - section 11.100 - Electronic Signature Certification Other US Medical Device Regulations 6
qualprod From paper to Electronic (records) in the QMS ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
S FDA's E submitter - For clinical electronic thermometer Medical Device and FDA Regulations and Standards News 6
J Integrity of electronic digital records - Medical Devices ISO 13485:2016 - Medical Device Quality Management Systems 4
T Electronic ECO/ECR Process - Software recommendations Document Control Systems, Procedures, Forms and Templates 3
M Informational EU – DSVG 03 – Cardiac Implantable Electronic Devices (CIED) – Guidance on the vigilance system for CE-marked medical devices Medical Device and FDA Regulations and Standards News 0
D Benefits of electronic QMS software Software Quality Assurance 7
M Informational US FDA Draft Guidance – Providing Regulatory Submissions for Medical Devices in Electronic Format – Submissions Under Section 745A(b) of the Federal F Medical Device and FDA Regulations and Standards News 0

Similar threads

Top Bottom