Marriott Global Standard Operating Procedures (SOP)
March 2016
SOP Overview: All identified business critical hotel systems are required to have a process for creating
periodic data and system file backups. In the event of a major system failure or corruption of working data
files, the backup must be available to deploy for system and/or data restoration.
SOP: BC01 – System Backup Procedures
Objective Business Continuity and Disaster Recovery
Audience Global iT System Managers
Discipline Expert iT Mid-Range Infrastructure Server Delivery Team
SOP Approver Global Technology Council
Review Cycle: ☒ Annual ☐ Every 2 Years ☐ As needed
Published: May 19, 2009 Effective Date: May 19, 2009
Last Revised: March 24, 2016 Last Reviewed: March 24, 2016
Key Requirements & Related Standards
Hardware:
Backup media and hardware must be procured according to the Marriott standards.
Software:
The Marriott certified tape backup solution must be used and on a version currently supported by
the vendor.
Backups to be configured and encrypted using standard, documented backup procedures.
The use of a Marriott approved cloud backup solution can be an alternative backup method. This
option may be more costly (i.e. additional bandwidth) and may not be available in all areas.
Backup Process:
Backup job history (printed or electronic format) will be maintained for a minimum 3 months.
Ensure the overall backup plan is included in the property’s Business Continuity Plan (MIP-30) and
includes a description of the following:
o Description of process used to create database backups and/or backup data specified by
application vendor and the business stakeholders.
o Written instructions for completing business critical full system backup (when required).
o The backup schedule will be based on the type of data being backed-up and include both
partial and full backups at appropriate and logical time intervals.
o Individual or position responsible for:
Configuring the backup
Performing the backup
Modifying the backup plan
Application and/or data recovery.
The iT Field Associate is responsible for the administration of the systems backup plan and
ensuring the existence of an application and data backup plan.
1|Page
Marriott Confidential & Proprietary Information
The backup plan and process must be reviewed and maintained annually and revised as necessary
with the various business units.
Backups should not be stored on unsecured network shares or other unencrypted devices. External
media devices such as a CD, external hard drive, or USB devices (thumb drive) are not acceptable
media for backups and should not be used.
Replace backup media annually. Cleaning tape should be replaced bi-annually.
At a minimum a two week rotation of backup media will be used.
SOP Process
Procurement:
1. Review Hardware list on Insight (North America) or iGFS SharePoint Lite site (International).
2. Procure through approved channels.
Backup Software Setup & Configuration:
1. Install and configure approved backup software according to the following documented backup
procedures.
Backup Validation & Recovery:
1. Review backup jobs on a daily basis for failed backup and seek to remediate failed backup jobs.
2. Test backup jobs at a minimum twice annually by restoring random files from tape to a server to
validate files are still readable and record results.
Documenting iT Disaster Recovery Plan as part of the overall Business Continuity Plan
1. Review the BC04 - Site Recovery & Restoration - SOP to complete the task of updating and
maintaining the iT Disaster Recovery plan
2. Incorporate backup job configuration into the iT Disaster Recovery Plan.
Ongoing maintenance
1. Budget tapes to be replaced annually or as needed.
Best Practices
Keep backup software licenses and maintenance agreements current.
Test restoring backup media by restoring to new server (new VM guest or separate physical
server).
One week of backup media will be kept onsite and the other with an approved offsite storage
company.
Ensure tape drives are cleaned to manufacturer’s recommendation.
In addition to year end backup tapes being taken out of rotation, also take a monthly backup tape
out of rotation.
A sample of backup plan can be also used as reference to list systems and data backup.
Related Documentation and Resources
iT Field Discipline SOP’s:
BC02 - Backup Tape Labeling, Storage and Disposal
BC03 - Emergency Tape Evacuation
BC04 - Site Recovery & Restoration
MGS:
Business Continuity Website
2|Page
Marriott Confidential & Proprietary Information
SharePoint:
Marriott Backup Documentation
Backup Software Version Support
Job Aides (all Job Aides are posted on SharePoint Lite):
Sample Backup Plan
Marriott International Policy (MIP) Relevance
MIP-29.S02 – Information Security and Confidentiality
MIP-30 – Business Continuity Planning
Revision History
Date Description (high level)
Updated new format and major revision to reflect organization structure and
March 24, 2016
policy changes.
3|Page
Marriott Confidential & Proprietary Information
