The layer that decides how bad a bad day gets.
Off-site backups verified every day, with recovery testing appropriate to your plan.
What it actually is
Every other layer prevents. This one assumes prevention failed and asks how fast you are trading again. Where included, immutable copies are protected against changes and deletion for their configured retention period, so an attacker with your credentials still cannot remove them. And a job reporting success is not proof you can restore; only a restore is.
Why it matters
This is the difference between an expensive week and the end of the business.
You learn during the incident that backups have been failing quietly for months.
What we do about it
- Off-site copies, immutable where included, kept out of reach of an attacker on your network
- Restores tested, with the evidence handed to you
- Microsoft 365 included: it is not backed up the way most people assume
The jargon, translated
- Immutable
- Written once and protected against changes and deletion for a configured retention period.
- RTO / RPO
- How fast you need to be back, and how much work you can afford to lose.
