Cyber resilience

Cyber recovery drills: Test with production unavailable

A restore test that starts by logging into the backup console with a domain account proves the backup works. It does not prove the ...

Read article →

Cyber resilience

Backup network segmentation: Which connections remain?

Segmentation projects rarely fail on the firewall. They fail on the list of connections nobody can switch off. A backup environment is ...

Read article →

Cyber resilience

Backup security reviews: What a small IT team can test

Most backup security reviews die in the planning stage. Someone proposes a control framework, the mapping exercise takes three weeks, and ...

Read article →

Cyber resilience

Insider threats: Can an administrator erase backups?

The honest answer, in most environments, is yes. An administrator with the access normally granted to run a backup platform can also ...

Read article →

Cyber resilience

Backup service accounts: How to limit their reach

The account the backup software uses to read production usually holds far more privilege than the job requires. Domain administrator, or a ...

Read article →

Cyber resilience

Backup security alerts: Which changes need attention?

A backup environment generates hundreds of status events a day. Jobs finish, jobs retry, agents reconnect, repositories fill and drain. ...

Read article →

Cyber resilience

Ransomware recovery points: How to choose a clean copy

The pressure during a ransomware recovery pushes toward the most recent restore point, because it costs the least data. That restore point ...

Read article →

Cyber resilience

Backup encryption keys: Who holds the recovery copy?

Encrypted backups behave like any other encrypted data. Without the key they are a large set of unreadable blocks, and no support contract ...

Read article →

Cyber resilience

Compromised backup servers: What remains protected?

A backup server is an ordinary Windows or Linux host with unusually broad reach. It holds credentials for the hypervisor, the storage ...

Read article →

Cyber resilience

Backup retention locks: What happens when they expire?

A retention lock is a date. When that date passes, the protection that made the copy immutable ends, quietly and without ceremony. Most ...

Read article →