Immutable backup
Also called: immutable backups · immutable storage
A backup that cannot be changed or deleted until a retention period set in advance has passed; when configured correctly, not even an administrator account can remove it early. Storage and cloud object-lock features are the usual way to get it. Ransomware crews often delete backups before encrypting, so keep at least one immutable or offline copy and test restores regularly.
Further reading: www.ncsc.gov.uk
From the Security Academy
Backup Strategy: the 3-2-1 Rule, Immutable Copies and Restore Drills
Backups are the last line of defence against ransomware only if they survive and restore. Covers 3-2-1, offline and immutable copies, RPO/RTO and drills.
8 min read ·
Advisories that mention this term
No advisories mention this term yet.