Marriott Global Standard Operating Procedures (SOP)

March 2016

SOP Overview: All identified business critical hotel systems are required to have a process for creating
periodic data and system file backups. In the event of a major system failure or corruption of working data
files, the backup must be available to deploy for system and/or data restoration.

SOP: BC01 – System Backup Procedures

Objective Business Continuity and Disaster Recovery
Audience Global iT System Managers

Discipline Expert iT Mid-Range Infrastructure Server Delivery Team

SOP Approver Global Technology Council
Review Cycle: ☒ Annual ☐ Every 2 Years ☐ As needed
Published: May 19, 2009 Effective Date: May 19, 2009
Last Revised: March 24, 2016 Last Reviewed: March 24, 2016

Key Requirements & Related Standards

Hardware:
 Backup media and hardware must be procured according to the Marriott standards.
Software:
 The Marriott certified tape backup solution must be used and on a version currently supported by
the vendor.
 Backups to be configured and encrypted using standard, documented backup procedures.
 The use of a Marriott approved cloud backup solution can be an alternative backup method. This
option may be more costly (i.e. additional bandwidth) and may not be available in all areas.

Backup Process:
 Backup job history (printed or electronic format) will be maintained for a minimum 3 months.
 Ensure the overall backup plan is included in the property’s Business Continuity Plan (MIP-30) and
includes a description of the following:
o Description of process used to create database backups and/or backup data specified by
application vendor and the business stakeholders.
o Written instructions for completing business critical full system backup (when required).
o The backup schedule will be based on the type of data being backed-up and include both
partial and full backups at appropriate and logical time intervals.
o Individual or position responsible for:
 Configuring the backup
 Performing the backup
 Modifying the backup plan
 Application and/or data recovery.
 The iT Field Associate is responsible for the administration of the systems backup plan and
ensuring the existence of an application and data backup plan.

1|Page
Marriott Confidential & Proprietary Information
  The backup plan and process must be reviewed and maintained annually and revised as necessary
with the various business units.
 Backups should not be stored on unsecured network shares or other unencrypted devices. External
media devices such as a CD, external hard drive, or USB devices (thumb drive) are not acceptable
media for backups and should not be used.
 Replace backup media annually. Cleaning tape should be replaced bi-annually.
 At a minimum a two week rotation of backup media will be used.

SOP Process
Procurement:
1. Review Hardware list on Insight (North America) or iGFS SharePoint Lite site (International).
2. Procure through approved channels.

Backup Software Setup & Configuration:

1. Install and configure approved backup software according to the following documented backup
procedures.

Backup Validation & Recovery:

1. Review backup jobs on a daily basis for failed backup and seek to remediate failed backup jobs.
2. Test backup jobs at a minimum twice annually by restoring random files from tape to a server to
validate files are still readable and record results.

Documenting iT Disaster Recovery Plan as part of the overall Business Continuity Plan
1. Review the BC04 - Site Recovery & Restoration - SOP to complete the task of updating and
maintaining the iT Disaster Recovery plan
2. Incorporate backup job configuration into the iT Disaster Recovery Plan.

Ongoing maintenance
1. Budget tapes to be replaced annually or as needed.

Best Practices
 Keep backup software licenses and maintenance agreements current.
 Test restoring backup media by restoring to new server (new VM guest or separate physical
server).
 One week of backup media will be kept onsite and the other with an approved offsite storage
company.
 Ensure tape drives are cleaned to manufacturer’s recommendation.
 In addition to year end backup tapes being taken out of rotation, also take a monthly backup tape
out of rotation.
 A sample of backup plan can be also used as reference to list systems and data backup.

Related Documentation and Resources

iT Field Discipline SOP’s:
 BC02 - Backup Tape Labeling, Storage and Disposal
 BC03 - Emergency Tape Evacuation
 BC04 - Site Recovery & Restoration

MGS:
 Business Continuity Website

2|Page
Marriott Confidential & Proprietary Information
 SharePoint:
 Marriott Backup Documentation
 Backup Software Version Support

Job Aides (all Job Aides are posted on SharePoint Lite):

 Sample Backup Plan

Marriott International Policy (MIP) Relevance

 MIP-29.S02 – Information Security and Confidentiality
 MIP-30 – Business Continuity Planning

Revision History
Date Description (high level)
Updated new format and major revision to reflect organization structure and
March 24, 2016
policy changes.

3|Page
Marriott Confidential & Proprietary Information