Summary
This document is a guide detailing the Secure Backup Review service provided by MTI. It outlines the process of conducting a workshop aimed at assessing existing backup and recovery solutions in relation to NCSC guidelines. The workshop includes identifying key personnel involved in backup operations, understanding shortcomings in the current backup process, and discussing potential mitigations for cyber threats. A discovery exercise is also performed to capture relevant client systems and ensure comprehensive coverage in the backup design. The output from the workshop includes a gap analysis against NCSC guidelines, recommendations for technical remediation, and indicative costs for improvements. The document further describes the security elements to be discussed during the workshop, such as access management and logging. It emphasizes the importance of conforming to best practices in backup solutions to mitigate risks associated with malware and ransomware attacks.
