We help IT Professionals succeed at work.

backup destination query (operating system calls)

I am doing some research on the CIS top 20 controls and trying to decipher what exactly this is suggesting:
"Ensure that all backups have at least one backup destination that is not continuously addressable through operating system calls."

1) In terms of say Veeam backups what is it recommending in terms of backup destinations? What would constitute "not continuously addressable through operating system calls", i.e. if you write your backups to a NAS storage device, and those are replicated to another storage device 20 miles away, how can you determine whether that meets the criteria of something that is "not continuously addressable through operating system calls"?

2) From a basic management level perspective, what exactly is "Ensuring that all backups have at least one backup destination that is not continuously addressable through operating system calls" protecting you from/why is it so necessary?
Comment
Watch Question

VMware and Virtualization Consultant
GOLD EXPERT
Fellow
Expert of the Year 2017
Commented:
An Air Gapped Backup. e.g. a backup replicated to the Cloud, or on tape in a vault.