Immutable / offline backup
Also called: air-gapped backup, offline copy
In one sentence
A backup copy that can't be changed or deleted, so ransomware can't destroy it along with your live data.
Immutable backups can't be altered once written; offline (air-gapped) backups aren't reachable from your network. Either one survives a ransomware attack that deletes reachable backups first, which modern ransomware routinely attempts.
Why it's on your cyber insurance application
Better applications ask specifically whether you keep an offline or immutable copy. It's what makes refusing to pay a ransom possible.
What this looks like in practice
Modern ransomware looks for your backups first, and a backup drive plugged into the machine it's backing up is on the same network the attacker already owns. Most cloud backup products have immutability as a setting you switch on, often called object lock or retention lock. Switch it on, then write down the date you did.
How the Readiness Check scores it
The free Check asks the same question a carrier will. Here it is, why it's asked, and the fix if today's honest answer is no. The full application question list has the rest.
Backup & recovery
How is your critical business data backed up?
Why carriers ask: Tested, offline-capable backups are the difference between an outage and paying a ransom. Claims data shows a record share of ransomware victims now refuse to pay. Working backups are what make refusal possible.
If the answer is no: Stand up automatic off-site backup for critical systems this week, then schedule a restore test.
The written evidence carriers accept
A “yes” on the application needs a document behind it. In the Readiness Pack, that document is:
Where this comes up by trade
Some trades get asked about this harder than others, usually because a rule or a claim pattern already points at it. These pages have that detail.
Related terms
Would you pass this question today?
The free Readiness Check scores you across the ten control domains carriers probe, in five minutes, no email required for the score.