Configuration Backups & Golden Images
This guide establishes the creation, secure storage and verification of complete system images for all Category II and III systems, enabling restoration to a known-good state within a defined recovery time objective.
In the middle of the ocean, a system crash or a ransomware infection can be a life-safety issue. You cannot wait for a technician to fly out with a recovery disk. A Golden Image is a complete “snapshot” of a system—OS, drivers, and OT applications—that allows an ETO to rebuild a workstation in less than 30 minutes.
The 3-2-1 Maritime Backup Rule
Standard IT backup rules must be adapted for the high-vibration and disconnected environment of a ship. While shore-side IT relies on the “Cloud,” a ship must rely on physical air-gapped redundancy. This ensures that even if the entire network is compromised by ransomware, your recovery media remains “invisible” to the virus.
3 Copies
Original data + Local backup + Offline vault.
2 Media Types
SSD/NAS and an Optical Disc or encrypted Tape.
1 Off-Ship
A copy kept at the Home Office (updated annually).
What Needs to be Backed Up?
ETOs often prioritize the AMS server but forget the “glue” that holds the network together:
Compliance Documentation Previews
Standardized templates and technical logs. View watermarked previews below; All fillable forms and SOPs are free with a registered account.
The specific regulatory requirements this playbook satisfies. Use these references when preparing for Class survey or responding to a surveyor's checklist.
