Backup

[Ong Peik Li]

Hello there,

I got a few questions here.

Would like to know how frequent does BCP/DR is performed and is there any report on BCP/DR whether it's performed successfuly? 

Thanks.

[Rilwan Ahmed · Accepted solution]

Hi @Ong Peik Li ,

Welcome to the community !!

1. Jira Cloud does not support automated backups. Currently, you can perform data-only backups (which exclude attachments, avatars, and logos) at any time. When you create a backup that includes attachments, avatars, and logos, you will need to wait 48 hours from the last time you created a backup with attachments.
Details in https://confluence.atlassian.com/jirakb/automate-backups-for-jira-cloud-779160659.html

2. Go through below link to know about data management from Atlassian
https://www.atlassian.com/trust/security/data-management

Please note: There is backup taken by Atlassian also. However, these backups are not used to revert customer-initiated destructive changes, such as fields overwritten using scripts, or deleted issues, projects, or sites. To avoid data loss, we recommend that you take regular backups. Learn more about creating backups in our documentation.

[Jack Brickey]

Hi @Ong Peik Li , can you elaborate on BCP/DR. For me BCP translates to business continuity plan. However, the title refers to the backups. If you wish to do a backup of your data, you need to do that yourself. if you go under the administration under system > back up manager, then you can learn more about performing backups.

[Ong Peik Li]

Hi Jack. It should be BCP/DR.

[Daria Kulikova_GitProtect_io]

Hello @Ong Peik Li ,

As it has already been mentioned by @Rilwan Ahmed Atlassian doesn't support automated backups and you can perform backups of your Jira only every 48 hours, which can't be enough. 

The BCP/DR planning can depend on your organization's specific needs, risk assessment or other regulations. You may read more about how to build DR startegy and evaluate RTO and RPO metrics for your planning here: https://gitprotect.io/blog/jira-restore-and-disaster-recovery-scenarios-use-cases-to-build-your-dr-strategy/

[Vish Reddy {Revyz}]

Hi @Ong Peik Li 

There might be two parts to your questions I think:

1. What are Atlassian's BCP/DR processes?

You can find Atlassian's processes in two places, one is the site that @Rilwan Ahmed has pointed you too - https://www.atlassian.com/trust/security/security-practices#service-availability

The second being their SOC 2 report, which you can find here - https://www.atlassian.com/trust/compliance/resources/soc2 

2. If you are thinking of BCP/DR for your Atlassian site, for which you re responsible for the data in it - reference https://www.atlassian.com/whitepapers/cloud-security-shared-responsibilities

As again @Rilwan Ahmed points out there are limitations on how often you can backup your data and more importantly what does it mean to restore back data. There are limitation with the natively provided Atlassian tools. The options you have are using the Backup Manager or third party applications available in the marketplace. Also reference this white paper from Atlassian on cloud resiliency - https://www.atlassian.com/whitepapers/cloud-resilience-exec-summary

I am part of Revyz where we do provide an app in the Marketplace which helps you automate backups and more.

Thanks

Vish