Essential 8 - Performing regular backups.
This is the final control of the Essential Eight and also the final line of defense in a cyberattack lifecycle. If an attacker penetrates all other 7 controls, the impact could still be reduced if all compromised files can be replaced with a clean backup in a timely manner.
Essential 8 Maturity Level 2 Controls and our Solution.
| Backups of data, applications and settings are performed and retained in accordance with business criticality and business continuity requirements. |  |
| Backups of data, applications and settings are synchronised to enable restoration to a common point in time. | |
| Backups of data, applications and settings are retained in a secure and resilient manner. | |
| Restoration of data, applications and settings from backups to a common point in time is tested as part of disaster recovery exercises. | |
| Unprivileged accounts cannot access backups belonging to other accounts. | |
| Privileged accounts (excluding backup administrator accounts) cannot access backups belonging to other accounts. | |
| Unprivileged accounts are prevented from modifying and deleting backups. | |
| Privileged accounts (excluding backup administrator accounts) are prevented from modifying and deleting backups. |