Immutable backup
A backup that neither an attacker, an employee nor an encrypted server knows about. It is stored in MDP CLOUD storage, invisible from your network and unchangeable for a set period. Even an administrator account cannot delete it.
Built for ISO 27001NIS2 DORA
- Separate storage
- Immutability
- Limited knowledge
The last line of defence when everything else is already encrypted
- Immutable unchangeable for a set period, by anyone
- Invisible from your network and systems
- 2 people know about it and can start a restore
- LT + DE storage in Lithuania and an Amazon data centre in Germany
A modern ransomware attack does not start with encryption. The attacker first spends weeks quietly exploring your network, finds the backup servers and administrator accounts, and only then, after deleting or encrypting the backups, encrypts everything else. A company that "had backups" is left without them exactly when it needs them most.
Immutable backup is built for this scenario. Data is copied to a separate MDP CLOUD storage that cannot be reached from your network and is invisible in all of your systems, in the backup console as well as on the file server. The backups are immutable: for a set period nobody can delete or overwrite them, including our administrators and yours. Only the people named in the contract know about them, and recovery goes through MDP CLOUD after the requester's identity has been verified.
Regular and immutable backups
Immutable backups do not replace daily ones, they add one more layer that an attacker cannot reach.
| Regular backup | Immutable backup | |
|---|---|---|
Visible in your network and consoles | yes | no |
Can be deleted by an administrator | yes | no, unchangeable for a set period |
Reachable by ransomware that has taken over the network | often yes | no |
Protection against a rogue employee | limited | yes, only named people know about it |
Starting a restore | from the console | through MDP CLOUD, after identity verification |
Purpose | everyday restores | disaster scenario |
Compliance | ISO 27001 A.8.13 | ISO 27001 A.8.13, NIS2 Art. 21, DORA Art. 12 |
How it works
Separate storage
Immutability
Limited knowledge
Verified recovery
Two geographic locations
Together with PlanB
Frequently asked questions
How is this different from regular cloud backup?
A regular cloud backup is still visible and managed from your backup console, so whoever gets access to the console can delete it. An immutable backup cannot be reached or changed from your environment, and only named people know it exists.
Who can start a restore?
Only the people from your company named in the contract, after confirming their identity in a procedure agreed in advance. This protects you if an attacker takes over an administrator account.
How long are backups unchangeable?
We set the period together, usually between 14 and 90 days depending on risk and requirements. When the period ends, backups are replaced by newer ones according to the retention policy.
Do NIS2 or DORA require this?
Both require backups and business continuity measures that withstand cyberattacks. Isolated, immutable backups are a common way to demonstrate this to an auditor and a supervisory authority.
Related services
PlanB: full infrastructure recovery in the MDP CLOUD cloud
Fire, flood, ransomware or just a failed server: with PlanB your servers, data and access are restored in the MDP CLOUD cloud and your business…
Full IT infrastructure backup
Not only servers: workstations, Microsoft 365, network device configurations, databases and documents.
Expertise confirmed by certifications
This service is delivered by specialists with valid international certifications. Their expertise is confirmed by independent organisations, not by us.
-
ISO/IEC 27001 Lead Implementer
The service is delivered in line with the requirements of an ISO/IEC 27001 management system.
-
Certified Information Security Manager
Security governance, policies and incident processes following the ISACA methodology.
-
Certified in Risk and Information Systems Control
Risks are assessed and controlled using the international IT risk methodology.
Get an immutable backup quote
We reply within 1 business day