disable the ability to delete backups to prevent malicious actors and accidental damage
A lot of backup providers offer the ability to disable the ability to delete backups. This provides protection for 2 scenarios:
A hacker compromises an administrator account and uses this access to remove backups to prevent recovery after ransomware or other attack
An administrator accidentally deletes backups that are required
If there is a legitimate use case for backups to be deleted, the ability to delete can be temporarily turned on but only by contacting support and only with the confirmation of 2 or more admins.
2
votes
Anonymous
shared this idea