Do you have a DR site?
Are customer data backups performed regularly within your organization? In which frequency?
Please describe when the last drill was.
Please attach the last drill report and its lessons learned.
Where are backups physically stored, and what means are used to back up the data?
Does your organization practice restores to test the effectivity and quality of backups?
Please attach a screen shot of the last practice restore, along with documentation corroborating this.
Does your organization have business continuity and disaster recover procedures?
Please describe where the data backup is stored.
Please describe where the encryption keys are stored.