Immutable Backup BACKUP

Backup that ransomware cannot delete or encrypt (immutable / offline) and whose restores are tested regularly. The last line that saves the business when everything else fails.

When you need it

• In every organization. The question is not "do we have backups" but "can ransomware reach the backups, and when did you last try a restore?"
• For M365 / Google data too: SaaS providers keep deleted data only for a limited time.

When you do not need it

• This control is not skipped. Only the size of the solution changes: for a small team, a cloud backup service is enough.

The 3-2-1-1-0 rule: 3 copies, 2 different media, 1 different location, 1 immutable/offline, 0 failed restore tests. The backup system must not be joined to the domain.