# Event website backup security review

**Event and edition:** [ ]
**Review date/time and time zone:** [ ]
**Organizer owner:** [ ]
**Technical owner or provider contact:** [ ]
**Approved retention/privacy owner:** [ ]

Use one row per actual backup or exported copy. Keep this sheet in an approved team location. Do **not** enter passwords, recovery codes, encryption keys, private links, payment details or attendee records.

| Copy and source system | What it contains / excluded dependencies | Storage account or location reference | Create / read / restore roles | Who can change retention or delete? | Separation from production and protection evidence | Encryption and key-recovery owner (reference only) | Approved retention / disposal owner | Last successful job / last successful isolated restore | Gap, action owner and due date |
|---|---|---|---|---|---|---|---|---|---|
| Website files and media | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |
| Registration or content database | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |
| Staff attendee-list export | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |
| DNS/configuration record | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |
| External ticketing or payment service | [provider-owned boundary; do not assume site backup covers it] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] | [ ] |

## Evidence and decision

- [ ] Confirm actual permissions and storage/retention settings in the relevant provider account.
- [ ] Confirm at least one copy is protected against the same routine deletion path as production.
- [ ] Confirm the recovery team can obtain the necessary credentials and keys through an approved, separate route.
- [ ] Confirm failed or incomplete jobs notify a named person.
- [ ] Confirm the last isolated restore and the observed data window; schedule a retest for any gap.
- [ ] Ask the approved privacy/finance owner to resolve retention conflicts before changing deletion settings.

**Decision:** [ready / restricted use / action required]
**Evidence links or ticket IDs (no secrets):** [ ]
**Open issue and owner:** [ ]
**Next review trigger (supplier exit, launch change, incident, or scheduled review):** [ ]