Backup resilience against ransomware
Backups that survive an attack: separation, immutability, restore tests and knowing what 'success' really means.
- Level
- Intermediate
- Length
- About 30 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 1 Oct 2026
Skills you'll practise
- Explain the 3-2-1 idea and why an offline or immutable copy matters.
- Tell job success apart from restore readiness.
- Plan regular restore tests and record results.
- Protect backup systems with separate credentials and MFA.
Course outline
- 1.Backup resilience against ransomwareVideo · 4 min
- 2.A backup you haven't restored is a hopeLesson · 8 min
- 3.Recovery objectives: RPO and RTOLesson · 8 min
- 4.Protecting the backup system itselfLesson · 8 min
- 5.Backup resilience against ransomware: knowledge checkKnowledge check · 14 questions
- 6.Backup reports success but restore failsScenario
- 7.Final exam8 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
- CISA: Ransomware Guide (joint): backups section
- NIST SP 800-34 Contingency Planning Guide (overview)
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.