Protecting Backup and Recovery in the Age of Ransomware

This blog introduces the Defensive Backup Infrastructure Controls (DBIC) framework from TrustedSec, a capability-focused set of controls and processes to ensure backups of critical systems are performed, hardened (including immutability and isolation), accessible during full outages, restorable at enterprise scale, and supported by resilience-enhancing controls such as secrets management and alerting; it emphasizes processes over tools and provides prescriptive guidance for surviving human-operated ransomware and destructive attacks.