Essential Eight mitigation strategy for performing, synchronising, protecting and test-restoring backups, with access and deletion rights narrowing at each maturity level until backups are immutable during retention.
Regular backups at Maturity Level One: backups of data, applications and settings by business criticality, synchronised to a common point in time, retained securely, protected from unprivileged users and test-restored in disaster recovery exercises.
Regular backups at Maturity Level Two: privileged accounts other than backup administrators can neither access other users' backups nor modify or delete backups.
Regular backups at Maturity Level Three: no user can access even their own backups except backup administrators, and backup administrators themselves cannot modify or delete backups during the retention period.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.