Each system must have an appropriate backup and recovery model defined by the System Administrator, including a Disaster Recovery plan. Records will be maintained of all backups created. Critical backups will be maintained off site in a secure facility.