# System Backup


**Were backup copies of affected systems created for further analysis?**

**Are the forensic copies encrypted and stored in a secure location?**
+  If yes, then continue to the next step. 
+  If no, encrypt the forensic images, then store them in a secure location to prevent accidental usage, damage, and tampering.