Commvault Cyber Recovery

It is important for organizations to have reliable access to data in any environment: on-premises, cloud, multicloud, or hybrid. The main task is to ensure data availability and avoid costly losses.

Usually, these factors hinder it:

• Point solutions cover only part of the needs and create isolated data silos;
• Infrastructure grows, the number of tools increases, and management becomes more complex;
• Disparate data reduces efficiency, delays new product launches, and increases storage costs;
• Business requires rapid data access, reliable protection, and prompt recovery for stable operation.

Backups should be stored separately from your cloud account, in isolated storage, or even in another cloud. Commvault Cloud provides cyber recovery, prioritizing “clean” recovery of the most important business systems, applications, and data necessary for seamless business operation.

After an attack, it is important to recover only “clean” data. Cleanpoint helps to quickly find the latest verified reliable recovery point. AI threat detection identifies suspicious changes, isolates compromised data in quarantine, and reduces the risk of reinfection.

Latest Reliable Files and Virtual Machines

No need to guess which copy to choose. Commvault Cloud suggests the latest reliable backup copy, allowing you to avoid worrying about recovering compromised data or the risk of reinfection during recovery.

Synthetic Recovery

Synthetic Recovery reduces the risk of reverting to a backup that already contains infected data. The technology automatically assembles a recovery package from files identified by Cleanpoint as reliable, using several backups from different periods.

Isolation of Compromised Data for Investigation

Suspicious files can be separated for analysis and incident investigation in a Cleanroom or other isolated environment.

Commvault Cloud is built on Zero Trust principles and isolates backups from the source environments. Backup data is stored in a separate security domain, so incidents in the production environment (user error, insider attack, etc.) cannot affect the backups. And with flexible recovery scenarios, lost or damaged data can be quickly restored.

Disaster Recovery and Cyber Recovery — What’s the difference

Disaster Recovery restores systems to operation after failures like power outages, equipment failures, or natural disasters. The main goal is to quickly restore the availability of systems that provide mirrored or replicated environments.

Cyber Recovery focuses on retrieving clean, uncompromised data after attacks, including ransomware. It requires storage isolation, checks, and collaboration between IT and security teams to ensure safe recovery.

Why it is important to protect backups from modification and deletion

During ransomware attacks, attackers often try to encrypt or delete backups to force the company to pay a ransom. Therefore, features that protect backup data from modification and deletion help keep backups intact and provide a real possibility to recover without extortion.