Annex 4.2.1

Backup-and-redundancy obligations require the entity to maintain backup copies of data and resources so that ransomware-induced loss of access does not become loss of operations; backups are the recovery lever specifically targeted at this attack class.

Backup obligations are the principal recovery lever for wiper events; without backups the destruction is final, with them the entity can restore mission-critical data and configuration.

Backup-and-redundancy obligations require sufficient available resources, including facilities, to restore service after denial events; redundancy is the procedural lever that converts denial from outage into degraded-but-available operation.

Backup-and-redundancy obligations are the principal recovery lever for destruction events affecting data, commands or subsystem state; backups are the difference between recoverable destruction and total loss.