Regular backups

Backups are an insured's last line of defense against ransomware and destructive attacks: they are what makes a full recovery possible even if the rest of the information system is destroyed. This is why Stoïk requires insureds to maintain regular, resilient backups as a condition of coverage.

The minimum requirement is a weekly backup of the data and critical elements of the insured's computer systems, kept offline or immutable so it stays out of reach of an attacker who has compromised the rest of the infrastructure.

For an insured sum above €2 million, these backups must also be documented and tested at least once a year.

Implement secure backups in the Cyber Best Practices is the source of truth for the exact conditions (offline and immutable options, secure online backup requirements) and implementation guidance.