Cloud Data Protection & Technology Glossary

Definition: A storage configuration where data, once written, cannot be modified, encrypted, or deleted by anyone for a specified period.  

Expanded Explanation: Immutability uses a Write-Once-Read-Many (WORM) architecture. Once a backup is saved, a time-lock is enforced at the storage level. Even users with full administrative or root access cannot alter the files.  

Example Use Case: A malicious insider attempts to delete all corporate backups before leaving the company. The storage array rejects the command because the data is locked by an immutability policy for 30 days.  

Why It Matters: It is the single most effective defense against modern ransomware strains designed to encrypt both primary data and backups.  

Related Terms: Air-Gapped Backup, Ransomware Recovery.

Definition: An organized approach to addressing and managing the aftermath of a security breach or cyberattack.  

Expanded Explanation: Incident response plans provide strict procedures for IT and security teams to follow during a crisis. The goal is to handle the situation in a way that limits damage, reduces recovery time, and controls costs. In the context of data protection, the final stage of incident response is safely orchestrating the recovery of uncorrupted data.  

Example Use Case: Following a malware alert, the incident response team follows their playbook: they isolate the affected servers, analyze the malware payload, and initiate a clean restore from yesterday's backup.  

Why It Matters: It transforms a chaotic security event into a structured, manageable process, reducing downtime and panic.  

Related Terms: Cyber Resilience, Ransomware Recovery.