Immutable backup: the last line of defence against ransomware

Why traditional backups are not enough

If backup consoles share domain credentials, or if copies sit on storage reachable from the production network, an attacker with elevated privileges can destroy them. Recovery becomes impossible exactly when it is needed.

Principles of a resilient backup

Immutable copies for a defined period, at least one copy isolated from the network, separate credentials and authentication for the backup infrastructure, encryption, anomaly monitoring on backup jobs.

The test that counts

1. Define acceptable recovery times for each service.
2. Regularly test full restores, not just the existence of copies.
3. Include backup within the Cyber Defense Center’s scope.
4. Update continuity plans after every test.