How to Verify a Backup Is Protected From Changes by a Compromised Admin Account

Backup access may share identity or control planes with production administrators, allowing a compromised account to change retention or delete recovery points.

Checks to make

Review role separation, MFA, immutable settings, delete protections, audit alerts, and break-glass procedures. Test whether a production admin can alter backup policy and verify recovery copies remain accessible through a separate approved identity.

When to get help

Backup security planning can review administrative separation and recovery. Informatix Systems can assess the symptoms, evidence, and next steps. Contact Informatix Systems to discuss this issue.