Backups that actually work when ransomware hits

The uncomfortable truth of most ransomware recoveries is that the backups were there — and useless. They were online, reachable from the same credentials the attacker stole, and encrypted alongside everything else.

A backup you can trust is offline or immutable, tested by an actual restore (not a green tick in a console), and covers the operational systems, not just the file server.

Run a restore drill this quarter. The first time you test a backup should never be the day you need it.