Backup & Ransomware Resilience Baseline

A set of foundational controls required for recoverability against ransomware and data loss: 3-2-1-1-0 backup strategy, immutable and air-gapped copies, credential isolation for the backup system, encryption, regular zero-error recovery testing (RTO/RPO), scope prioritization, and backup integrity monitoring. Framework is CISA #StopRansomware and NIST SP 800-34; the fact that attackers target backups first (in the vast majority of incidents) makes these controls critical.