Comment by leipert
9 days ago
More like: your company (or government agency) is critical infrastructure or of a certain size, so there are obligations on how you maintain your records. It’s not like the US or other countries don’t have similar requirements.
[flagged]
> This is incredible. Government telling me how to backup my data. Incredible.
No more incredible than the government telling you that you need liability insurance in order to drive a car. Do you think that is justifiable?
The difference is that you cannot choose who you're sharing a road with while you can usually choose your IT service providers. You could, for instance, choose a cheaper provider and make your own backups or simply accept that you could lose your data.
Where people have little or no choice (e.g government agencies, telecoms, internet access providers, credit agencies, etc) or where the blast radius is exceptionally wide, I do find it justifiable to mandate safety and security standards.
4 replies →
> liability insurance in order to drive a car. Do you think that is justifiable?
New Zealand doesn't require car insurance, and I presume there are other countries with governments that that don't either.
I suspect most people in NZ would only have a sketchy idea of what liability is, based on learning from US TV shows.
2 replies →
Nope: The other way around. If you are of a certain size, you are required to ensure certain criteria. NIS-2 is the EU directive and it more or less maps to ISO27001 which includes risk management against physical catastrophes. https://www.openkritis.de/eu/eu-nis-2-germany.html
Of course you can do backups if you are smaller, or comply with such a standard if you so wish.
[flagged]
17 replies →
It feels like you are being obtuse/arguing in bad faith. Of course there are standards on backups. Most countries have them.
Let's think what regulations does the 'free market' bastion US have on computer systems and data storage...
HIPAA, PCI DSS, CIS, SOC, FIPS, FINRA...
> HIPAA, PCI DSS, CIS, SOC, FIPS, FINRA
Those are related to _someone else's_ data handling.
1 reply →