Best Practices for air gapped M365 backup?

[nlinecomputers]

Back to original topic, I've yet to see a cyber insurance policy that demands an air gapped backup of 365. However, most SaaS backups of 365 fully isolate their backups, they're immutable, not connected to the source of backup once the backup if complete, thus airgapped. The goal is to isolate the backups from being able to be "touched" by some bad actors action. Keeping backups local on the network, such as a plugged in external USB drive...well, we know how bad THAT an go.

This. I am certain that someone is simply misunderstanding the term and really are just requiring an OFFLINE backup. I.E. a hard drive stored off site in a fireproof safe.

 

[Sky-Knight]

This. I am certain that someone is simply misunderstanding the term and really are just requiring an OFFLINE backup. I.E. a hard drive stored off site in a fireproof safe.

And if that's the case, Synology to pull it local, then hyper backup on it to archive the Synology to a USB attached disk and store it.

Or even better, just use the above to replicate off to Backblaze or something similar.