Immutability and ransomware resilience expectations

Overview

Immutability prevents attackers or rogue admins from deleting backups during ransomware. It is not magic—understand limits.

Explain clearly

Time-bound retention buckets, legal hold overrides, and console compromise risks if credentials leaked.

Architecture checks

Separate backup admin creds from domain admins; MFA + PAM on backup consoles.

Testing

Quarterly attempt delete backup job as red team exercise—should fail within immutability window.

Client messaging

“We can’t guarantee zero downtime, but we can guarantee attackers can’t erase your last 30 days of backups under policy X.”