Immutable Backup
Table of Contents
What is an immutable backup?
An immutable backup is a backup of data that is non-rewritable and non-erasable. It provides extra security by prohibiting accidental data deletion or ransomware attacks enforced through software and hardware. Once data is written, it cannot be altered or overwritten by some virus, ransomware, or other malicious software or bad actor.
What is an example of an immutable backup?
An example of an immutable backup is when a copy of data is written to a tape, disk, or cloud in a safe place where it cannot be tampered with or compromised even when a system is down or attacked by a ransomware attack. Oftentimes, this can physically be in what is known as an air gapped disk-based device where the network is separated from the backup, making it impossible to accidentally delete, update or alter the backup data.
Write Once Read Many (WORM) tapes are also another form for immutable backup storage.
What is the difference between mutable and immutable backup?
The main difference between mutable and immutable backups is the ability and inability to modify the backup copy of data. For immutable backups, the storage for the backup data is usually stored on tape, disk or cloud with specialized software tools and hardware to detect anomalies and access to the data. The data is often untouchable for a specified retention period.
What do immutable backups provide?
Immutable backups ensure safe copies of data for recoverability. Immutable backups ensure data integrity by making sure the data cannot be altered and in its original form as a trusted copy.
Immutable backups help with compliancy as well. Many industries require the validity of the integrity of data through strict policies and regulations for data protection and security of any backup data.