An accessible copy can become part of the incident
If backup infrastructure uses the same administrator accounts, remains reachable from the user network or stores copies in an ordinary share, an attacker may encrypt or delete it together with production data. Keep at least one copy offline, immutable or inside a separately administered environment.
A green status is not a recovery test
A completed job confirms that data was written. It does not validate application consistency, encryption keys, dependencies or the ability to start the service on available hardware. Test individual files and databases regularly, then rehearse full recovery for critical systems.
Define recovery objectives with the business
RPO states how much data the company may lose; RTO states how quickly the service must return. These targets determine backup frequency, storage design, network capacity and the recovery procedure. Without them, an organisation cannot judge whether its protection is sufficient.
Build independent layers
- use separate administrator accounts and multifactor authentication;
- segment backup management interfaces;
- keep immutable or offline copies;
- monitor deletion, policy changes and failed jobs;
- document owners, dependencies and recovery order.
Backup is the last recovery layer, not a substitute for patching, identity security, monitoring and incident response. Its value is measured by the ability to restore a working business service.