30 minutes to pwn town: Are speedy responses more important than backups for recovery?

Maintaining good-quality backups is often seen as the spine of any organization's ability to recover from cyberattacks quickly. Naturally, given the emphasis placed on them by experts of all stripes, you'd be forgiven for thinking that prioritizing them over anything else would be the way to go. Small businesses looking for a …

[Doctor Syntax]

If a response of less than 30 minutes is essential then it needs to be completely automatic - an attack when there's nobody at work will have succeeded long before any manual response can take place. Backups are still important. We had backups before online pwnage became a thing. They were to protect against H/W failure and worse - worse was the reason for off-site storage.

[harrys]

immutable snapshots....

every 30 mins say

mind u its gonna cost in terms of performance/storage requirements

willing to pay ???????

[Anonymous Coward]

Re: immutable snapshots....

"willing to pay ???????"

ZFS is very good, and efficient, at this.

And if these frequent snapshots are backed up locally, that could keep costs down. It would allow to put all these snaphots off-line and off-site quickly after detecting an intrusion.

Because, they were immutable, you said?

[@mysnapsplanet]

While backups are crucial for recovery, speedy responses are equally important in minimizing damage. A balanced approach that combines both backups and rapid response strategies can help organizations quickly recover from cyberattacks.