Common use of Records and Documentation Clause in Contracts

Records and Documentation. Each vendor, among other requirements, must anticipate and prepare for the loss of information processing capabilities. The routine backing up of all data and software is required to recover from losses or outages of the computer system. Data and software essential to the continued operation of vendor functions must be backed up. The security controls over the backup resources shall be as stringent as the protection required of the primary resources. It is recommended that a copy of the backed-up data be stored in a secure, offsite location. The vendor shall maintain written policies and procedures for computer system backup and recovery. These policies and procedures shall be made available to the AAAPP upon request.