Hardening Backups Against Ransomware

This guidance explains that human-operated ransomware actively targets and can destroy backup systems, making traditional backup assumptions (e.g., geographic isolation) insufficient; it outlines four critical objectives—back up critical systems, harden backups (immutable storage or isolated management), ensure emergency access to backups (battle box and offline credentials), and practice large-scale recovery—to enable organizations to recover from enterprise-scale destructive attacks.