Data Recovery

Why Is This Control Critical?

In the cybersecurity triad -- Confidentiality, Integrity, and Availability (CIA) -- the availability of data is, in some cases, more critical than its confidentiality. Enterprises need many types of data to make business decisions, and when that data is not available or is untrusted, then it could affect the enterprise. An easy example is weather information to a transportation enterprise. When attackers compromise enterprise assets, they make changes to configurations, add accounts, and often add software or scripts. These changes are not always easy to identify, as attackers might corrupt or wipe backup data and logs. This can make restoring to a known, trusted state difficult.