Zero Trust and Enterprise Data Backup

Topics: Data Recovery, Data Resilience, Zero Trust

Pages: 9

Company: Object First

Cyberattacks and ransomware target backup data in 93% of incidents. Despite being primary targets for ransomware and data exfiltration, existing Zero Trust frameworks often overlook the security of data backup and recovery systems.

Zero Trust Data Resilience (ZTDR) is an innovative model that extends Zero Trust principles to data backup and recovery. Developed through a collaboration between Numberline Security and Veeam, ZTDR builds on the Cybersecurity and Infrastructure Security Agency’s (CISA) Zero Trust Maturity Model (ZTMM).

This framework provides a practical guide for IT and security teams to improve data protection, reduce security risk, and enhance an organization’s cyber resilience.

The primary principles of ZTDR include:

• Segmentation — Separation of Backup Software and Backup Storage to enforce least-privilege access, as well as to minimize the attack surface and blast radius.
• Multiple data resilience zones or security domains to comply with the 3-2-1 Backup Rule and to ensure multi-layered security.
• Immutable Backup Storage to protect backup data from modifications and deletions. Zero Access to Root and OS, protecting against external attackers and compromised administrators, is a must-have as part of true immutability.

The white paper “Zero Trust and Enterprise Data Backup” details these principles and offers practical steps for implementation.

What You’ll Learn:

• Security Enhancement: Core Zero Trust principles applied to data backup.
• Implementation: Best practices for infrastructure segmentation and resilience zones.
• Applications: Case studies on mitigating ransomware and cyber threats.

Download the white paper and start your journey towards Zero Trust Data Resilience.