November 7, 2024
Ransomware Recovery – Isolated Recovery Environment (IRE)
This is required in worst-case scenarios of Ransomware attacks where everything including DR and Backups has failed. This is a critical part of your recovery strategy. Also known as a cyber recovery “clean room”.
Understanding normal Disaster Recovery vs. Ransomware Disaster Recovery is key
- Below is a curated list of reading material – Else lot of time is lost searching for one.
- https://dl.acm.org/doi/10.1145/3606022 – Very informative
- https://www.isaca.org/resources/white-papers/2023/blueprint-for-ransomware-defense – Very informative
- https://www.linkedin.com/pulse/cyber-recovery-three-pillar-playbook-surviving-malware-vadim-hiekin/
- https://drj.com/journal_main/the-new-normal-in-disaster-recovery-preparing-for-ransomware-attacks-takes-a-new-approach/
- https://www.wwt.com/blog/immutable-backup-strategy-and-the-journey-to-cyber-resilience
- https://www.iansresearch.com/resources/all-blogs/post/security-blog/2021/11/02/the-role-of-immutable-storage-services-in-ransomware-protection
- https://docs.vmware.com/en/VMware-Live-Recovery/services/vmware-live-cyber-recovery/GUID-C44AF76E-790F-4BCF-8821-796FCB93A68D.html
- https://vox.veritas.com/blog/netting-out-netbackup/veritas-netbackup-isolated-recovery-environment-%E2%80%93-your-answer-to-ransomware/895498
- https://www.delltechnologies.com/asset/nl-be/products/storage/industry-market/recovering-business-destructive-cyber-attack.pdf