Ransomware scans network locations where the infected user has read and write access. Files under documents, desktop, and the shared folders you have access are examples of locations vulnerable to getting encrypted.
Imagine if an administrator account or someone using an account that has full read and write access to the server gets infected. Easily, everything on the server and the network will be affected. It can halt the operations and affect the productivity of not just one person but the entire organization.
Yes, there is a reliable backup solution. So why worry about it?
Leaving the backup storage with incorrect permissions will put the backups at risk of getting infected and unauthorized access.
The objective is to isolate the backup location from unauthorized access and Ransomware. This can be achieved by enforcing strict permissions to the backup storage and only be limited to the backup administrator account. By implementing a separation of duties approach, we secure the backup location by removing all unnecessary write permissions for all other accounts except the backup administrator account.
It’s like installing multiple locks with different and unique keys for each.
If you are unsure of the status of your backup routine or interested to know more about best practices on protecting your data against cyber attacks, let us know and we'll be happy to assist!