ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
42. Disaster recovery of critical information infrastructure.
Edition: 2024-02-16 · In force
42. Disaster recovery of critical information infrastructure.
(1)An owner of a critical information infrastructure shall establish a disaster recovery and backup site which may be distinct of each other and located in a different location from the main location of the critical information infrastructure.(2)The owner of critical information infrastructure shall ensure that the backup site system—(a)is stored in a format that permits the retrieval of the information and restoration of a critical information infrastructure system and data in the event of a compromise or destruction of the infrastructure;(b)retains the backup copy of the data in the system and establish security procedures in a manner that ensures the integrity, confidentiality and availability of the critical information and the ability to retrieve the information in case of loss or destruction;(c)has established procedures for routine periodical backup in accordance with these Regulations;(d)has internal processes that ensures restoration of the critical information in case of a disaster; and(e)records security incidents including the process of restoring the critical information, the identity of the personnel or third party involved in the restoration of the critical information and the details of the information restored.