Cyber-Resilient Backup
Protect the backup, Trust the recovery
Ransomware and other cyber threats increasingly target backup environments to compromise an organisation's ability to recover. Cyber-resilient backup adds layers of security around backup data, administrative operations and recovery—helping ensure that protected data remains available and trustworthy when it is needed most.
Ransomware Defence • Backup Security • Recovery Integrity • Access Protection • Resilient Recovery
Why Traditional Backup Is No Longer Enough
Cyber-resilient backup protects not only the data being backed up, but also the integrity of the backup and recovery process.
Backups Are a Target
-
Attackers may deliberately seek out backup repositories
-
Compromising backups can reduce an organisation's recovery options
-
Backup infrastructure therefore needs protection of its own
Compromised Data Can Be Backed Up
-
Malware may exist before an attack becomes visible
-
Infected or compromised data can potentially enter backup sets
-
Restoring without appropriate safeguards can reintroduce the threat
Privileged Access Creates Risk
-
Compromised administrative credentials can threaten backup environments
-
Critical operations such as deletion require stronger controls
-
Authentication alone may not be sufficient for high-risk actions
Breaking the Ransomeware Attack Loop
Ransomware may remain dormant in production data long before an attack becomes visible. During that period, compromised files can potentially enter successive backup generations. If those backups are later restored without additional checks, malicious content can return to production and restart the attack cycle.
Cyber-resilient backup therefore needs protection both when data enters the backup environment and when it is restored back into production.
Inspect Before Backup Data Is Stored
Malware scanning during backup provides an opportunity to identify suspicious or malicious files before they become part of protected recovery data. Asigra states that files identified during this scan can be quarantined.
Protect the Backup Environment
The backup repository itself must be protected from compromised credentials, destructive actions and attempts to identify or delete recovery data. This is where MFA/MPA, repository-name obfuscation, Soft Delete and encryption become relevant.
Inspect Again During Recovery
A second scan during recovery helps prevent previously dormant malware from simply being restored alongside legitimate business data. Asigra explicitly positions this second scan as protection against reinfecting the production environment.
Layers of Cyber-Resilient Protection
Cyber-resilient backup requires multiple layers of protection. Different controls address different attack paths—from malicious content entering backup data to stolen credentials, destructive actions and attempts to compromise recovery itself.
Bidirectional Malware Scanning
-
Scan data during both backup and recovery
-
Quarantine detected malicious content
-
Help prevent dormant malware from returning to production
Content Disarm & Reconstruction (CDR)
-
Inspect supported files for deeply embedded active content
-
Apply policy-based filtering, blocking or removal
-
Reconstruct usable files without identified unwanted embedded content
MFA & Multiperson Approval
-
Strengthen authentication for access and sensitive operations
-
Require additional approvals for configured destructive actions
-
Reduce the risk created by stolen or compromised credentials
Soft Delete Protection
-
Add a second layer to backup deletion
-
Retain deleted backup data in a protected location
-
Help defend against malicious as well as accidental deletion
Repository Obfuscation
-
Avoid predictable backup repository naming conventions
-
Make backup data more difficult for attackers to identify
-
Add another defensive layer against attacks targeting backup repositories
Encryption & Data Confidentiality
-
Encrypt backup data in transit and at rest
-
Protect backup information against unauthorised disclosure
-
Strengthen protection against data theft and extortion scenarios
Together, these controls provide defence in depth across backup data, administrative access, repository protection and recovery.