Immutable / offline backup
Also called: air-gapped backup, offline copy
In one sentence
A backup copy that can't be changed or deleted, so ransomware can't destroy it along with your live data.
Immutable backups can't be altered once written; offline (air-gapped) backups aren't reachable from your network. Either one survives a ransomware attack that deletes reachable backups first, which modern ransomware routinely attempts.
Why it's on your cyber insurance application
Better applications ask specifically whether you keep an offline or immutable copy. It's what makes refusing to pay a ransom possible.
How the Readiness Check scores it
The free Check asks the same question a carrier will. Here it is, why it's asked, and the fix if today's honest answer is no. The full application question list has the rest.
Backup & recovery
How is your critical business data backed up?
Why carriers ask: Tested, offline-capable backups are the difference between an outage and paying a ransom. Claims data shows a record share of ransomware victims now refuse to pay. Working backups are what make refusal possible.
If the answer is no: Stand up automatic off-site backup for critical systems this week, then schedule a restore test.
The written evidence carriers accept
A “yes” on the application needs a document behind it. In the Readiness Pack, that document is:
Related terms
Would you pass this question today?
The free Readiness Check scores you across the ten control domains carriers probe, in five minutes, no email required for the score.