[{"data":1,"prerenderedAt":10},["ShallowReactive",2],{"public:public\u002Fcontent\u002Fdocs\u002Fnis2":3},{"slug":4,"title":5,"description":6,"draft":7,"updated":8,"html":9},"nis2","NIS2 Article 21 evidence for backup management","How Verestore's countersigned restore tests support NIS2 Article 21(2)(c), backup management and disaster recovery.",false,null,"\u003Ch1>NIS2: evidence for backup management and disaster recovery\u003C\u002Fh1>\n\u003Cp>The NIS2 Directive (EU 2022\u002F2555) asks essential and important entities to take measures that include \u003Cstrong>business continuity, such as backup management and disaster recovery\u003C\u002Fstrong> (Article 21(2)(c)), and to assess whether those measures are effective (Article 21(2)(f)). For a database, an effective backup is one that restores.\u003C\u002Fp>\n\u003Ch2>What Verestore gives you\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Cstrong>Regular restore tests.\u003C\u002Fstrong> Daily, weekly or monthly, of your newest PostgreSQL backup, into a disposable database that's deleted when the run ends.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>What was checked.\u003C\u002Fstrong> Every table restored, row counts against the previous run, checksums of the tables you choose, and your own SQL checks against a baseline.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Evidence you can't edit.\u003C\u002Fstrong> Each result is signed by the run and countersigned by Verestore. Anyone can check a report at \u003Ca href=\"mailto:support@verestore.dev?subject=Verestore%20launch\">\u002Fverify\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>EU hosting.\u003C\u002Fstrong> The hosted runners, the control plane and the evidence are in the EU (Scaleway, Paris region).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>An evidence pack per period.\u003C\u002Fstrong> A ZIP with the reports, the signed results and a summary, for your national authority, an auditor or your management body.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2>How to use it in your NIS2 measures\u003C\u002Fh2>\n\u003Col>\n\u003Cli>In your business continuity measures, state how often database backups are restore-tested and what counts as a pass.\u003C\u002Fli>\n\u003Cli>Connect the backup location with a read-only key (\u003Ca href=\"\u002Fdocs\u002Fgetting-started\">how access works\u003C\u002Fa>) and set the schedule to match.\u003C\u002Fli>\n\u003Cli>Keep the evidence packs as the record that the measure is applied and effective; Article 21(2)(f) asks you to assess effectiveness.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Verestore produces evidence for one measure; it doesn't make your organisation NIS2-compliant. Your national transposition and your auditor decide what is sufficient.\u003C\u002Fp>\n",1794290783590]