Cybersecurity definition
What is Immutable Backup?
By Cyber Tool Stack Editorial TeamUpdated
Definition
A backup copy stored so it cannot be modified, encrypted, or deleted for a set retention period — even by an administrator account — guaranteeing a clean recovery point survives even if ransomware compromises the backup system itself.
Where Immutable Backup fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
Air GapKeeping a system or backup copy physically or network-isolated from any connected system, so it can't be reached or encrypted by ransomware or other malware spreading through the network.RTO / RPORecovery Time Objective / Recovery Point ObjectiveTwo targets that define how much disaster an organization can tolerate: RTO is how long systems can be down before recovery, and RPO is how much data — measured in time — can be lost since the last good backup.3-2-1 Backup RuleA backup best practice: keep at least three copies of your data, on two different types of media, with one copy stored offsite. The modern 3-2-1-1-0 variant adds one offline or immutable copy and zero recovery errors — meaning restores are regularly tested and confirmed to work.