Recovery

Design Backups for Security and Recovery

Backups are a security control, not only an operations convenience. They can limit the impact of ransomware, destructive mistakes, compromised administrator accounts, corrupted data, and failed deployments. A backup strategy is useful only when attackers cannot easily destroy it and the organization can reliably restore from it. Copying production data to another location is therefore only the beginning. Define what must be recoverable Start by identifying the systems and data that matter to recovery. This may include databases, uploaded files, configuration, encryption key material, infrastructure definitions, and other state that cannot simply be rebuilt from source control.