Initial readiness screening

How resilient is your data protection?

Effective recovery depends on more than having a backup. Check the protection, access and recovery practices that support your organisation when systems are disrupted.

Start with five quick questions. After your preliminary results, continue to the full BazGrid assessment of your organisation’s scope, controls and evidence.

96%of ransomware cases tracked in Q3 2025 involved data exfiltration.BlackFog · Q3 2025

89%of surveyed organisations hit by ransomware had their backup repositories targeted.Veeam · 2025 ransomware report

94%of surveyed IT leaders used immutable storage or planned to implement it within 12 months.Vanson Bourne · 2023 survey

Loading your assessment…

Your preliminary score

0/10 0 of 5 answered

Question 1 of 5

Are your backup copies protected from alteration or deletion, including by privileged accounts?

Why this matters: Backups support recovery only while they remain available and intact. Retention rules that can be shortened or bypassed may leave recovery data exposed. Check when protection begins and whether an administrator can remove it before the retention period ends.

Question 2 of 5

Can you demonstrate that data retention and security practices meet the requirements applicable to your organisation?

Why this matters: Requirements depend on your data, sector and obligations. A product capability alone does not establish organisational compliance. Defined retention periods, accountable owners and current audit evidence help reviewers understand which controls operate and where further validation is needed.

Question 3 of 5

Do access controls, encryption and monitoring protect your stored data from unauthorised access or copying?

Why this matters: Protection against deletion does not prevent someone from reading or copying data. Excessive account permissions, exposed credentials and missing monitoring can create separate risks. Access restrictions, encryption and reviewable activity logs should work together across your storage and backup systems.

Question 4 of 5

Does your protection cover the underlying storage infrastructure as well as its applications and interfaces?

Why this matters: A control enforced through an application may not protect every path to the underlying data. Physical access, operating-system privileges and storage management interfaces need their own safeguards. Review how data and recovery information remain protected if an application-level control is bypassed.

Question 5 of 5

Can you recover essential data if your primary site becomes unavailable or compromised?

Why this matters: Keeping every recovery copy at one site creates a shared point of failure. A second copy may still depend on the same credentials, network or recovery team. An independently protected location and a tested recovery process help establish whether recovery remains practical during a site-wide incident.