In Safeguard 11.1, we talked about establishing a data recovery process. Before something fails, the organization needs to understand what has to be recovered, what comes back first, who's responsible, and how recovery is supposed to work. Safeguard 11.2, Perform Automated Backups, takes the next step. CIS requires automated backups of in-scope enterprise assets at least weekly, or more frequently based on the sensitivity of the data. The word "automated" is important. If protecting critical...