Layer 05 of 6Included from the Silver tier
The layer that decides how bad a bad day gets.
Immutable, off-site backups with restores that have actually been tested.
What it actually is
Every other layer prevents. This one assumes prevention failed and asks how fast you are trading again. Immutable means the backup cannot be encrypted or deleted even with your credentials. Modern ransomware hunts backups first. And a job reporting success is not proof you can restore; only a restore is.
Why it matters
This is the difference between an expensive week and the end of the business.
Without this layer
You learn during the incident that backups have been failing quietly for months.
What we do about it
- Off-site and immutable, so ransomware cannot reach them
- Restores tested, with the evidence handed to you
- Microsoft 365 included: it is not backed up the way most people assume
The jargon, translated
- Immutable
- Written once and unchangeable for a set period. Cannot be encrypted or deleted.
- RTO / RPO
- How fast you need to be back, and how much work you can afford to lose.