Does your organization maintain offline and offsite backups that would remain unaffected by incidents or disasters impacting your primary systems?

Offline backups (disconnected from networks) and offsite backups (stored in a different physical location) provide critical protection against ransomware, malware, physical disasters, and other threats that could compromise your primary systems and connected backup solutions. These backups serve as your last line of defense when all other recovery options fail.

Evidence could include documentation of your backup strategy showing offline/offsite components, backup schedules and rotation policies, contracts with offsite storage providers, or photographs of physical media in secure offsite locations with appropriate handling procedures.