Evidence
The linked CISA and NIST publications support offline backups, restoration planning, segmentation, and removal of implicit trust.
CODE OVER CHAOS / FIELD LAB 02
Two copies can still be
one failure domain.
Map the trust paths shared by production and recovery. Distance is geography. Independence is architecture.
CONTROL INDEPENDENCE MAPPER
Five trust paths. One recovery reality.
Choose the description closest to your authorized environment. The worksheet runs locally in the browser and does not send or store the selections.
METHOD & LIMITS
Evidence, inference, opinion—kept in separate rooms.
Inference
Shared administration, identity, network reach, and mutability can couple systems that appear separate. The worksheet makes that dependency visible; it does not predict compromise.
Editorial view
Resilience should be drawn as a trust map, not counted as storage. A small shared permission repeated across layers can inherit the blast radius of the whole organization.
PRIMARY-SOURCE LEDGER
Show the receipts.
CISA — #StopRansomware: Gunra Ransomware ↗
The joint advisory recommends tested offline, immutable backups in a physically separate, segmented location.
CISA — StopRansomware Guide ↗
CISA advises maintaining backups offline because accessible backups may be found, deleted, or encrypted by ransomware.
NIST — Cybersecurity Framework 2.0 ↗
The RECOVER function frames restoration of affected assets and operations as part of reducing incident impact.
NIST SP 800-207 — Zero Trust Architecture ↗
NIST states that trust should not be granted implicitly from network location or asset ownership alone.