Pau Lo

<div>
<div class="content wysiwyg-content">
I am doing some research on the CIS top 20 controls and trying to decipher what exactly this is suggesting:<br />
&quot;Ensure that all backups have at least one backup destination that is not continuously addressable through operating system calls.&quot;<br />
<br />
1) In terms of say Veeam backups what is it recommending in terms of backup destinations? What would constitute &quot;not continuously addressable through operating system calls&quot;, i.e. if you write your backups to a NAS storage device, and those are replicated to another storage device 20 miles away, how can you determine whether that meets the criteria of something that is &quot;not continuously addressable through operating system calls&quot;?<br />
<br />
2) From a basic management level perspective, what exactly is &quot;Ensuring that all backups have at least one backup destination that is not continuously addressable through operating system calls&quot; protecting you from/why is it so necessary?
</div>
</div>


I am doing some research on the CIS top 20 controls and trying to decipher what exactly this is suggesting:
"Ensure that all backups have at least one backup destination that is not continuously addressable through operating system calls."

1) In terms of say Veeam backups what is it recommending in terms of backup destinations? What would constitute "not continuously addressable through operating system calls", i.e. if you write your backups to a NAS storage device, and those are replicated to another storage device 20 miles away, how can you determine whether that meets the criteria of something that is "not continuously addressable through operating system calls"?

2) From a basic management level perspective, what exactly is "Ensuring that all backups have at least one backup destination that is not continuously addressable through operating system calls" protecting you from/why is it so necessary?

backup destination query (operating system calls)

Computer data storage, often called storage or memory, is a technology consisting of computer components and recording media used to retain digital data. In addition to local storage devices like CD and DVD readers, hard drives and flash drives, solid state drives can hold enormous amounts of data in a very small device. Cloud services and other new forms of remote storage also add to the capacity of devices and their ability to access more data without building additional data storage into a device.

Storage

Virtualization is the act of creating a virtual (rather than actual) version of something, including (but not limited to) a virtual computer hardware platform, operating system (OS), storage device, or computer network resources. Virtualization is usually the creation of a system that executes separate from the underlying hardware resources, or the creation of an entire desktop for systems located elsewhere, similar to thin clients.

Virtualization

The term "Backup" means the methods and processes involved to copy computer data (system data as well as application data) to media other than the ones where the data originally live (disk, tape, optical, cloud). "Restore" in turn means the methods and processes involved in data recovery, i. e., bringing back copied computer data to their original location. Backup/Restore primarily serves as a means of protection against data loss, be it due to disaster, corruption or sabotage. It can also be used for recovering data from an earlier point in time and even for cloning machines or applications. There is a wide variety of backup/restore software available, from expensive commercial products to free or open source tools.

Storage Software

Veeam® has pioneered a new market of Availability for the Always-On Enterprise™ by helping organizations meet recovery time and point objectives (RTPO™) of less than 15 minutes for all applications and data. Veeam develops backup, disaster recovery and virtualization management software for VMware and Hyper-V virtual environments. The company focuses on products that help with virtualized workloads, reduce downtime, and ensure the system Availability required by service-level agreements.