Backup Isolation and Immutability

What it means

Backup isolation and immutability reduce the chance that compromised production identities, systems, or administrators can alter or destroy recovery data.

Why it matters

Backups are high-value targets because disabling recovery increases attacker leverage and incident impact.

Practical focus

• Separate backup administration and credentials
• Use offline, logically isolated, or immutable copies
• Protect catalogs, keys, and recovery infrastructure
• Monitor deletion and policy changes

Common mistakes

• Keeping every backup reachable from production
• Using the same administrators and credentials
• Assuming immutability replaces access control
• Failing to test recovery keys and dependencies

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

Authoritative sources

• CIS Critical Security Controls Version 8.1
• NIST SP 800-53 Rev. 5 — Security and Privacy Controls