Electronic Data Backup Procedure

C

Connie82

#1
#1
Procedures

I have been given a task by my boss to see what other companies do as a backup procedure. My question is this, does anyone know what the specifications are of QS9000 regarding backups? Such as how long we have to keep tapes, how many sets of tapes we keep, etc. If anyone could help me with this, it would be appriciated! Thank you!

connie:bigwave:
 
12 questions to ask before buying a QMS
Elsmar Forum Sponsor
R

Russ

Quite Involved in Discussions
#2
#2
Backup

I see no requirement in QS for backup of data, it just makes common sense to do so though. Our procedure reads:
"Any critical data maintained on PCs is backed-up no less than one time per week. Corporate data files maintained on the mainframe are backed-up daily, and the entire system is backed-up one time per week. Back-up copies are maintained offsite."
Maybe this will help!
:bigwave:
 
Claes Gefvenberg

Claes Gefvenberg

Admin
#3
#3
Welcome to the Cove

We use this variant...

The entire mainframe is backed up on a tape device:

Daily: We use 7 tapes for this, so this backup lasts for one week

Weekly: Every sundays backup is transferred to a fireproof safe in another building. Kept for 5 weeks. (One of our sites was destroyed in a fire earlier this year. The backups were stored in a different location, and survived - An already grave situation would have been a lot worse if the data had been destroyed)

Long term: I can't remember the frequency, but we have older tapes going back many years.

It's vital to keep replaced backup equipment in working order. Old backups must be accessable.

And hey... Welcome to the Cove..

/Claes
 
Last edited:
JodiB

JodiB

Still plugging along
#4
#4
Same here

We do much the same. Daily backups plus then a weekly backup and then a quarterly backup. Tapes are taken home each night by an employee. (hmmm. what if they wanted to sabotage us?)

Our approved forms, templates, and procedures are set up to synchronize on everyone's computer at shutdown, so even if network is down these bits are still available.

We don't have a written procedure for this but I have asked our IT consultant to write a disaster recovery plan for us since we have identified Information Systems as a process.
 
CarolX

CarolX

Super Moderator
Super Moderator
#5
#5
Re: Procedures

Hi Connie and welcome to the Cove,


Connie82 said:

I have been given a task by my boss to see what other companies do as a backup procedure. My question is this, does anyone know what the specifications are of QS9000 regarding backups? Such as how long we have to keep tapes, how many sets of tapes we keep, etc. If anyone could help me with this, it would be appriciated! Thank you!

connie:bigwave:
Click to expand...
We are not QS9K, but we are ISO9K:1994. This issue came up during our initial assesment, and I received a minor N/C because we did not address back-up of computer records. I plugged this section into my Engineering Document Control Procedure:

5.0 BACKUP OF COMPUTERIZED RECORDS

5.1. TAPE BACKUP OF JOB MAINTENANCE SYSTEM IS PERFORMED BY ENGINEERING DAILY.

5.1.1. TAPES CREATED ON MONDAY, TUESDAY, WEDNESDAY AND FRIDAY ARE STORED ON SITE AND REUSED WEEKLY.

5.1.2. TAPES CREATED EVERY THURSDAY ARE STORED OFFSITE AND REUSED AFTER 5 WEEKS.

5.2. TAPE BACKUP OF ACCOUNTING FILES AND PROGRAMMING FILES IS PERFORMED BY DEPARTMENT LEADS WEEKLY. TAPES ARE STORED OFFSITE BY ENGINEERING AND REUSED AFTER 1 WEEK.

Our auditor position was that some of thiese files contain records, and how did we prevent damage to the records. We were doing the action, and he wanted the issue addressed in our procedure. As I said, it was a minor N/C, I tossed in these few lines, and we were good to go.

Regards,
CarolX
 
CarolX

CarolX

Super Moderator
Super Moderator
#6
#6
Re: Same here

Lucinda said:

We do much the same. Daily backups plus then a weekly backup and then a quarterly backup. Tapes are taken home each night by an employee. (hmmm. what if they wanted to sabotage us?)
Click to expand...
Lucinda,

That is pretty standard practice, removing the tapes from the premesis. Our weekly backup is removed from the premesis and stored in a fireproof lockbox in the man's home.

I wouldn't be too concerned about the sabatoge thing, your doing daily and weekly. If the guy pops a cork and it takes you a week to discover this, you have only lost a weeks worth of data.

I know there are systems that require a much more secure method (i.e. banks), but for us regulars, that should work.

Regards,
CarolX
 
E

energy

#7
#7
Two extremes

One place-we had a fireproof safe deposit box in a local bank.
One place-we had them in the IT Guys's glove compartment in his car. Neither one was an issue with the customer auditors. But, ISO, who knows? :vfunny: :ko: :smokin:
 
L

Laura - 2003

#8
#8
Amazing coincidence

We've just been thru a periodic assessment (1994) and non-conformed on back-up of data.

Our main servers are controlled and backed up by a dept...not within our scope, but the assessor went to see them, took a look at the SLA and returned satisfied..however he was not happy about remote back-ups.

Our consultants have laptops and store much of their information on their hard drives. One of the auditees confessed that he did not conduct back-ups of his hard drive data onto the network, as often as he should. He hadn't done them at all in the last six months.

He non-conformed us....as I knew he would.....and said that we needed to document a QP (fair enough) and provide evidence of audit prior to the next assessment....fair enough.

I have found a way to ensure that when a consultant plugs his laptop into a hot desk....his files will automatically back-up onto the server...I've documented this in a procedure.

Does anyone think I will need more?

Lau~.
 
E Wall

E Wall

Just Me!
Super Moderator
#9
#9
What We Do...

Much the same as the others:
Backups performed Daily, Weekly, and Monthly. The monthly tape is sent off-site.
 
G

Graeme

#10
#10
nothing is forever ...

There are a lot of good and sound ideas in this thread about backup stategies. I just want to add a couple of things about off-site and long-term storage.

(1). Several people have mentioned keeping offsite backup copies in a fireproof safe. This is a great idea, PROVIDED you are using one designed and certified for data media. The great majority of fireproof safes are designed to keep the internal temperature below the ignition point of PAPER for a specified period of time. If you remember the title of a famous book by Ray Bradbury you know that the ignition point of paper is 452 degrees F. These safes do that by releasing large amounts of water from the material that forms the insulation. (hydrated something - I don't remember exactly.) The steam keeps everything (relatively) cool. There are two tiny little problems ...
  • Plastic melts at much lower temperatures, and almost all media are plastic or contain large amounts of it. (Have you ever left a CD in the back window of a car in the summer?)
  • The principal component of magnetic media is iron. Iron rusts (oxidizes). Other materials in the magnetic coating also oxidize or corrode, and do it faster in a high-temperature steam environment.
Again, the fireproof safe must be rated for use with data media, or you may wind up with a pile of melted, rusty plastic.

(2). Many organizations keep backups or other archives in long term storage for various reasons. (years or decades) If you do, you should have a policy for regularly testing and refreshing the data.
  • At regular intervals, test it to see if the data is still readable.
  • Verify that you still have the machines available to read it. (I still have one 8-inch floppy disk. Does anyone have a drive for that?)
  • Plan to copy the data to the newest available permanent storage media. (Currently CD-R or mabe DVD-R)
  • Plan to convert the information to new data formats before the old becomes unreadable.
  • Remember that all data recording media has a limited useful lifetime. There have been numerous well-documented cases of losses of old motion pictures and audio recordings because of deterioration of the film or tape. CD-R may prove to have a long life but we don't know yet.
  • Make sure that the storage environment is suitable for preserving the life of the storage media.

Above all, protect your :ca: and make your backups BEFORE you need them.
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
K Storage of Electronic Backup Data? Document Control Systems, Procedures, Forms and Templates 6
D Preservation of Electronic Data / Information Technology ISO 13485:2016 - Medical Device Quality Management Systems 4
W ISO 14155 - Electronic clinical data systems - Definition Other Medical Device Related Standards 0
somashekar Electronic data Back-up procedure, for Medical device QMS and regulatory purpose. ISO 13485:2016 - Medical Device Quality Management Systems 4
Q Is Handwritten Raw Data required to keep with Electronic Records? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 5
D Centralizing the Receiving and Storage of Electronic Customer Data Document Control Systems, Procedures, Forms and Templates 1
S Electronic Record Retention per FDA Requirements - Electronic Data Capture (EDC) Records and Data - Quality, Legal and Other Evidence 4
M Electronic Form for Collecting 5S Data Automatically Lean in Manufacturing and Service Industries 9
K Measurement Equipment with Electronic Data Collection - What type to buy? Inspection, Prints (Drawings), Testing, Sampling and Related Topics 2
V 21 CFR Part 11 Electronic Data Storage Requirements vs. Paper Records Qualification and Validation (including 21 CFR Part 11) 2
AnaMariaVR2 XML, eCTD & FDA - Electronic Information and Data Submissions US Food and Drug Administration (FDA) 1
Q Electronic Process Examples (IT Data Warehouse) Human Factors and Ergonomics in Engineering 1
A NPRD-95 "Non-electronic Parts Reliability Data" Reliability Analysis - Predictions, Testing and Standards 5
U Automotive History Of Electronic Data Interchange (EDI) World News 1
R Procedure for Control of Data, Documented & Electronic needed Document Control Systems, Procedures, Forms and Templates 3
C Electronic work instructions - recommendations for electronic data control software. Document Control Systems, Procedures, Forms and Templates 3
Q How to handle the integrity of electronic data in databases? Records and Data - Quality, Legal and Other Evidence 13
a_bardi Help me define way of control electronic data files - Logs, etc Records and Data - Quality, Legal and Other Evidence 3
Marc Controlling Electronic Data Sheets from Manufacturers, Articles and Such Like Document Control Systems, Procedures, Forms and Templates 0
Geoff Cotton TS 16949 - Control of Electronic Data Document Control Systems, Procedures, Forms and Templates 3
A Document and Data Control - We are not satisfied with electronic document security Other ISO and International Standards and European Regulations 3
C Shelf life electronic components 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 2
C Cleaning of electronic transmitter Other Medical Device Related Standards 2
M Is IEC 60601-1-2 required by FDA for all electronic medical devices? IEC 60601 - Medical Electrical Equipment Safety Standards Series 1
Anonymous16-2 21 CFR Part 11 - Steps to take if we want to validate an electronic system Pharmaceuticals (21 CFR Part 210, 21 CFR Part 211 and related Regulations) 2
R Electronic and hand-written footnotes for GDP Document Control Systems, Procedures, Forms and Templates 1
A 21 CFR part 11 - section 11.100 - Electronic Signature Certification Other US Medical Device Regulations 6
qualprod From paper to Electronic (records) in the QMS ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
S FDA's E submitter - For clinical electronic thermometer Medical Device and FDA Regulations and Standards News 6
J Integrity of electronic digital records - Medical Devices ISO 13485:2016 - Medical Device Quality Management Systems 4
T Electronic ECO/ECR Process - Software recommendations Document Control Systems, Procedures, Forms and Templates 3
M Informational EU – DSVG 03 – Cardiac Implantable Electronic Devices (CIED) – Guidance on the vigilance system for CE-marked medical devices Medical Device and FDA Regulations and Standards News 0
D Benefits of electronic QMS software Software Quality Assurance 5
M Informational US FDA Draft Guidance – Providing Regulatory Submissions for Medical Devices in Electronic Format – Submissions Under Section 745A(b) of the Federal F Medical Device and FDA Regulations and Standards News 0
R Electronic handwritten signatures for approvals - Signed with a Stylus or a Finger Document Control Systems, Procedures, Forms and Templates 2
WEAVER Electronic Weighing Scale Calibration Tolerance Manufacturing and Related Processes 1
S ISO 10993 Biocompatibility Evaluation - Electronic thermometer Other Medical Device Related Standards 3
P FDA inspections and electronic signatures Other US Medical Device Regulations 2
S Need Assistance in Visual Inspection - Tiny electronic components AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 11
G Looking to move to an electronic QMS software Software Quality Assurance 10
QIE Electronic IFU - new project, need input Other Medical Device and Orthopedic Related Topics 0
U Electronic templates for making paper control charts Reliability Analysis - Predictions, Testing and Standards 2
M Informational USFDA – Radiological Health Regulations; Amendments to Records and Reports for Radiation Emitting Electronic Products; Amendments to Performance Stand Medical Device and FDA Regulations and Standards News 0
P Electronic component failure analysis turnaround time Reliability Analysis - Predictions, Testing and Standards 0
W Part Change Request - Standard (OTS) electronic parts (resistors, capacitors etc.) IATF 16949 - Automotive Quality Systems Standard 3
C In cases where users of an electronic system change their names Qualification and Validation (including 21 CFR Part 11) 6
A How a test flow can be build for a car electronic sunroof control Reliability Analysis - Predictions, Testing and Standards 6
M Electronic signature - name.lastname or equal to handwritten Document Control Systems, Procedures, Forms and Templates 3
N Electronic Instructions for use (eIFU) EU Medical Device Regulations 1
M Electronic Signature - Certificate Qualification and Validation (including 21 CFR Part 11) 8

Similar threads

Top Bottom