Backup Security and Ransomware Resilience: Immutable and Air-Gapped | Disaster Recovery Ep 15

Ransomware attackers increasingly target both production systems and backup repositories. If your backups can be encrypted too, they are not protecting you. We start with the escalating threat, including real-world catastrophes like the FAA system failure, a Microsoft Azure outage, the OVHcloud fire and the NHS ransomware attack, and how ransomware insurance created a gold rush for attackers. Then we cover planning for the worst with BCP and DRP, RTO and RPO, and the 3-2-1 rule. You will learn how continuous data protection and backup security controls (strict access, encryption at rest and in transit, protected encryption keys) harden your backups, and why immutable and air-gapped backups are the last line of defense. We finish with testing recovery plans and restoring safely without reintroducing the malware. In this lesson you will learn: Why attackers go after backups first BCP, DRP, RTO and RPO as defense Backup access controls and encryption Immutable and air-gapped backups Restoring without reinfecting Chapters: 0:00 Introduction: Mastering Backup Security 0:31 Attackers target production and backups 1:17 Lesson roadmap 1:31 Section 1: When disaster strikes, the escalating threat 2:07 Real-world catastrophes 2:54 Ransomware insurance created a gold rush 3:38 Section 2: Planning for the worst, BCP and DRP 4:33 The ISO 22301 framework 5:12 RTO and RPO 6:07 Section 3: The 3-2-1 backup rule 7:02 Continuous data protection 7:45 Backup security controls 8:35 Section 4: The immutability gap 9:45 Air-gapped backups as the last line of defense 10:35 Section 5: Testing recovery plans 11:31 Restoring without reintroducing malware 12:23 Section 6: Surviving disasters, the digital heist 12:53 Wrap up: Do you know exactly where your offsite backup is? This is episode 15 of the disaster recovery series. Watch the full playlist in order to build your disaster recovery and resilience skills from the ground up, and subscribe so you do not miss the next lesson. Cybersecurity Masterclass by Joshua Moses | CyberTrace Foundation.