Backup and recovery: what cyber insurance applications ask

Immutability, separate credentials, encryption, restore testing, and recovery time. This block drives ransomware pricing more than any other technical section.

12 questions in this section

attestedAre there procedures and tools to back up sensitive data and critical systems? partialAre backups kept offline (disconnected) or immutable / air-gapped? partialAre backups encrypted? partialAre backups protected by MFA? partialAre backups secured with different access credentials from administrator credentials? attestedHave you tested the successful restoration and recovery of key server configurations and data from backups in the last 6 months? attestedAre backups tested for malware-free integrity prior to restoration? attestedEstimated time to restore essential functions in widespread ransomware attack? partialHow frequently is critical data backed up? partialWhere are backups stored (on-prem / offsite / offline / MSSP / cloud)? partialIf backups are encrypted, are encryption keys stored offline? partialCan workstations be reimaged in bulk from a controlled operating system image?

Back to the full question index

Stop answering this from memory

Connect Microsoft 365, Entra ID, and Azure read-only. Insurance Posture reads the live configuration behind each application answer and shows you which ones you can prove before you sign.

Assess your posture