Backup storage must be considered as you are working to identify the location of business data with the organization's information system:

• The backup storage environment must be protected at the same level as the business information requirement.
• It is important to ensure that backup media is secured at all times from unauthorized access.
• Unnecessary backup copies should be destroyed in accordance with your organization's policies:
  • Unnecessary copies of an information system backup could become mismanaged over time leading to unauthorized access. If you don't need it anymore get rid of it!