Home › Resources › Essential Eight › Regular backups

Regular backups

One of the eight mitigation strategies in the Essential Eight, checked against 6 tests at Maturity Level One.

This strategy makes sure important data, software and settings are backed up, retained for a suitable period, and can be restored when they are needed.

Why it matters

Backups are the final line of defence against ransomware and accidental loss. A backup nobody has ever restored is an assumption. Testing restores is what turns it into assurance.

Where Intelligence Group fits

  • Identify the data and systems that must be recoverable
  • Back up on a schedule that matches how much data you can afford to lose
  • Keep backups isolated so ransomware cannot reach them
  • Test restores regularly, not just that the backup job succeeded
  • Retain restore-test records as evidence
Where Intelligence Group fits

Intelligence Group rates this strategy from the evidence your organisation already generates, reports the maturity level it supports, and sets out the next step to lift it.

Official guidance: ASD Essential Eight Maturity Model