What does emphasis on storage location and annual review of media backups imply?

What does emphasis on storage location and annual review of media backups imply?

• A. Store media backups in a secure off-site location and review the location's security at least annually.
• B. Store backups on the main site only and review periodically.
• C. Store backups in public storage and review never.
• D. Store backups on personal devices only.

Answer: (A)

Backups need to be protected from loss and unauthorized access by storing them in a secure location away from the primary environment. An off-site storage location provides resilience against disasters at the main site and helps ensure that copies of data remain available for recovery. Requiring an annual review of the storage location ensures the facility continues to meet security requirements, that access controls are effective, and that the media remains protected over time. This ongoing validation is essential to maintaining PCI DSS compliance for how media is handled. Storing backups only on the main site, or in public storage with no oversight, or on personal devices, either eliminates the off-site protection or introduces elevated risk and does not meet enterprise security standards.

Backups need to be protected from loss and unauthorized access by storing them in a secure location away from the primary environment. An off-site storage location provides resilience against disasters at the main site and helps ensure that copies of data remain available for recovery. Requiring an annual review of the storage location ensures the facility continues to meet security requirements, that access controls are effective, and that the media remains protected over time. This ongoing validation is essential to maintaining PCI DSS compliance for how media is handled.

Storing backups only on the main site, or in public storage with no oversight, or on personal devices, either eliminates the off-site protection or introduces elevated risk and does not meet enterprise security standards.