Cyber Incidents and Backups

How are cyber incidents changing and what techniques do attackers use most often?

Ransomware often uses multiple vectors and attacks are continuously evolving.

How should backups be set up so they are truly usable for recovery after an attack?

Without processes, people, and risk management, tools alone are not enough.

What role do SOC, processes, and responsibilities play in incident response?

Backup security is based on risk analysis, recovery testing, verification, and hardening of the backup environment.

How do requirements and priorities differ in OT and IT environments?

The OT environment has a physical dimension and prioritizes availability over confidentiality.

What is most important when implementing a SOC?

When implementing a SOC, the key is a combination of technology, people, automation, and the ability to respond to incidents.