Usually, when outsourcing backup data to the cloud, people want to maintain full administrative control over their data. But is this always sensible?
One of the first targets in a cyber attack is typically the backup data. Because if backup data can be deleted or encrypted, a company often cannot recover from the cyber attack on its own. In the worst case, business closure threatens.
Ensuring that at least one copy of the backup data is immutable and non-deletable can determine a business's survival.
It helps to use the services of a Cloud Service Provider (CSP) that can store backup data accordingly. Here, it's important to ensure that the data is written as immutable and thus protected from intentional or accidental deletion for a specific period.
Since there is no administrative access to the Cloud Service Provider's infrastructure, internal IT administrators cannot delete or modify outsourced backup data. This protects against internal threats like "Rogue Admins" and external cyber attacks that use stolen administrative user accounts to delete backup data.
"Malicious administrators" or "Rogue Admins" are IT administrators who abuse their privileged access rights to perform unauthorized actions that can harm the company. These individuals often have extended rights to systems and data and exploit this position to commit harmful actions intentionally or for personal motives, including the malicious, intentional deletion of backup data.
However, even for backup data outsourced to a Cloud Service Provider: without immutability, adequate protection of the data cannot be ensured. We therefore recommend always checking whether data can be written immutably and clarifying the conditions for this.
Do you have questions about Immutable Backup or would you like to learn more about our solutions? Don't hesitate to contact us. We're happy to advise you and help you find the right solution for your requirements.
Das sind weitere Beiträge, die Sie interessieren könnten.
Zur Blogübersicht