Home Compliance & Certification IoT Backup Screenshot Guide

IoT Backup Screenshot Guide

Last updated on Sep 25, 2025

1. Purpose of this Guide

This artefact proves that your organisation’s IoT devices (for systems that are within scope) are backed up — even when they don’t have built-in auto-backup. Cyber Essentials requires this because IoT systems (like CCTV, smart printers, and sensors) often hold critical data or configurations, and if they fail without backups, you could lose visibility or security control.

2. What You Will Submit

You will need:

  • A screenshot showing the backup of IoT data.

  • The screenshot should demonstrate:

    • The IoT device or system (e.g. CCTV NVR, smart printer, building sensor).

    • Backup configuration or export screen.

    • Storage location (external HDD, NAS, or cloud).

    • Timestamps showing recent backup activity.

3. How to Collect / Obtain / Generate This Evidence

CCTV / NVR systems (e.g. Hikvision, Dahua):

  1. Log into the NVR/DVR management console.

  2. Go to Backup / Export.

  3. Screenshot showing backup of recordings/configurations to external disk or NAS.

Smart Printers / MFDs:

  1. Open the printer’s admin console (via web interface).

  2. Go to Settings → Backup & Restore.

  3. Screenshot the backup/export screen (config files saved to external location).

IoT Sensors / Gateways:

  1. Access the device’s management console.

  2. Export configuration or logs.

  3. Screenshot the interface showing data export/backup in progress.

General Best Practice:

  • If the IoT device has no native backup, screenshot the manual process:

    • Export to USB, external HDD, or cloud sync folder.

    • Show file/folder with timestamp confirming backup.

4. Evidence Format

  • Accepted file types: PNG, JPG, PDF.

  • Suggested naming format:
    YourCompanyName_IoTBackup_YYYY-MM-DD.png
    Example: AcmeCorp_IoTBackup_2025-07-01.png

5. What “Good” Looks Like

  • Screenshot shows the actual IoT system (not a generic PC folder).

  • Clearly shows backup/export action and target location.

  • Includes timestamp to prove recency.

  • If multiple IoT devices are critical (e.g. CCTV + smart sensors), provide at least one screenshot per category.

Why it matters: auditors want confidence you can recover IoT data/configurations after device failure, ransomware, or physical damage.

6. Tips

  • Label the storage media (e.g. “CCTV Backup HDD 1”).

  • Rotate between at least two physical drives for resilience.

  • Encrypt backups where possible, especially if devices capture sensitive information.