Backup and cyber recovery, defined.

0–9

3-2-1-1-0 backup rule#Backup

Keep three copies of your data, on two different storage types, with one copy offsite, one copy immutable or air-gapped, and zero errors in verified backups and tested restores. It extends the classic 3-2-1 rule for ransomware, which targets backups too.

The 3-2-1-1-0 guide →See also Immutable backup, Air gap, Restore testing

A

Active Directory#ADIdentity

Microsoft's on-premises directory service for users, computers, groups and group policy. Most Windows sign-ins and access decisions depend on it, which makes it a frequent target in attacks.

Identity recovery guide →See also Entra ID, Forest recovery, Object restore

Air gap#Air-gapped backupBackup

A backup copy isolated from your production network, either logically (separate accounts, credentials and access paths) or physically (such as tape on a shelf), so an attacker who controls your environment can't reach it.

DAR Assured Recovery →See also Immutable backup, Tape storage, 3-2-1-1-0 backup rule

B

Backup window#Backup

The period when backup jobs run. A shorter window means less load on production systems and less time when recent data is unprotected.

School district case study →See also RPO

C

CAGE code#Commercial and Government Entity codeBuying

A five-character identifier assigned to companies that do business with the U.S. federal government. KELYN's CAGE code is 4YM03.

Contract vehicles →See also Contract vehicle

Cleanroom recovery#Recovery

Restoring systems into an isolated environment, checking backups for threats and rebuilding from a known-clean point before reconnecting to production, so a recovery doesn't bring the attacker back with it.

Cleanroom Recovery →See also Cyber recovery, Point-in-time recovery

CMMC 2.0#Cybersecurity Maturity Model CertificationCompliance

The U.S. Department of Defense program that verifies defense contractors protect Federal Contract Information and Controlled Unclassified Information. Its levels build on the NIST SP 800-171 security requirements.

Commvault Cloud for Government →See also NIST SP 800-171, FedRAMP High

Commvault Cloud for Government#Compliance

Commvault's software-as-a-service data protection platform for government, with FedRAMP High authorization and GovRAMP High authorization. KELYN is its first managed service provider.

GovCloud MSP →See also FedRAMP High, GovRAMP, Managed service provider

Contract vehicle#Buying

A pre-competed agreement, such as a GSA Schedule, NASA SEWP V or NASPO ValuePoint, that lets government and education buyers purchase from approved vendors without running a full procurement each time.

KELYN's contract vehicles →See also GSA Schedule, NASA SEWP V, NASPO ValuePoint

Cyber recovery#Recovery

Recovering from a cyberattack such as ransomware. Unlike disaster recovery after a storm or outage, the environment and the backups themselves may be compromised, so recovery has to start from a verified clean copy.

Recovery Co-Pilot (RECO) →See also Cleanroom recovery, Disaster recovery plan, Ransomware

D

Disaster recovery plan#DR planRecovery

A written, owned plan for restoring systems after an outage or attack: recovery objectives for each workload, where every copy lives, the order systems come back, how the plan is tested, and who to call.

DR plan template →See also RTO, RPO, Restore testing

E

Entra ID#Formerly Azure Active DirectoryIdentity

Microsoft's cloud identity service. It handles sign-in to Microsoft 365 and other cloud apps, and holds users, groups, roles, conditional access policies and app registrations.

Identity Recovery →See also Active Directory, Shared responsibility model

F

FedRAMP High#Compliance

The highest impact level of the Federal Risk and Authorization Management Program, the U.S. government's security authorization for cloud services. It covers systems where a breach could have a severe effect on an agency's operations.

Commvault Cloud for Government →See also GovRAMP, Commvault Cloud for Government

FIPS 140-3#Compliance

The U.S. federal standard for validating cryptographic modules. A FIPS 140-3 validated module has been independently tested to meet the standard's security requirements.

See also FedRAMP High

Forest recovery#Identity

Rebuilding an entire Active Directory forest, domain controller by domain controller, when the whole directory is compromised.

Identity recovery guide →See also Object restore, Active Directory

G

GovRAMP#Formerly StateRAMPCompliance

A security authorization program for cloud services used by state and local governments, modeled on FedRAMP.

Commvault Cloud for Government →See also FedRAMP High

GSA Schedule#Multiple Award ScheduleBuying

Long-term, government-wide contracts run by the U.S. General Services Administration, so agencies can buy from approved vendors at pre-negotiated terms. KELYN holds GSA Schedule GS-35F-043GA.

Contract vehicles →See also Contract vehicle, NASA SEWP V

I

Immutable backup#Backup

A backup copy that can't be altered or deleted until its retention period ends, even by an administrator. Ransomware may be able to reach it, but can't encrypt or erase it.

DAR Assured Recovery →See also S3 Object Lock, Air gap, Retention period

K

KELYN Score#Recovery

A biannual review, part of Recovery Co-Pilot (RECO), that scores the readiness of five areas of an organization's infrastructure, with quantitative metrics and qualitative insights into its health and recovery capabilities.

Recovery Co-Pilot (RECO) →See also Restore testing, Disaster recovery plan

M

Managed service provider#MSPBuying

A company that runs a technology service for you under an agreement. For backup, that means deploying, monitoring and supporting the platform and running restores, rather than only selling the software.

Commvault MSP →See also Commvault Cloud for Government

N

NASA SEWP V#Solutions for Enterprise-Wide ProcurementBuying

A government-wide acquisition contract run by NASA for IT products and services, open to federal agencies. KELYN is available on SEWP V through Carahsoft.

Contract vehicles →See also GSA Schedule, Contract vehicle

NASPO ValuePoint#Buying

The cooperative purchasing program of the National Association of State Procurement Officials, used by state and local government and education. KELYN holds Master Agreement AR2472.

The announcement →See also Contract vehicle

NIST SP 800-171#Compliance

The National Institute of Standards and Technology's security requirements for protecting Controlled Unclassified Information in non-federal systems, used by contractors and the basis for CMMC.

See also CMMC 2.0

O

Object restore#Identity

Rolling back individual directory objects (users, groups, policies or attributes) that were deleted or changed, so only what broke is touched and the rest of the directory keeps running.

Identity recovery guide →See also Forest recovery, Point-in-time recovery

P

Point-in-time recovery#Recovery

Restoring data to the state it was in at a specific earlier moment, such as just before a deletion or an attack, rather than only to the latest backup.

See also RPO, Cleanroom recovery

R

Ransomware#Recovery

Malware that encrypts or steals data and demands payment. Modern ransomware often targets backups first, which is why immutable and air-gapped copies matter.

The 3-2-1-1-0 guide →See also Immutable backup, Air gap, Cyber recovery

Restore testing#Recovery

Regularly restoring from backups to prove they work and to measure how long recovery really takes. It's the zero in the 3-2-1-1-0 rule.

Recovery Co-Pilot (RECO) →See also 3-2-1-1-0 backup rule, RTO

Retention period#Backup

How long a backup copy is kept before it can be deleted. Retention is usually set by business needs and by regulatory or records requirements, and on immutable storage it is also how long the copy is locked.

See also Immutable backup, S3 Object Lock

RPO#Recovery point objectiveRecovery

The most data, measured in time, that a workload can afford to lose. An RPO of 15 minutes means backups must run at least every 15 minutes.

DR plan template →See also RTO, Backup window

RTO#Recovery time objectiveRecovery

How long a workload can be down before the outage does unacceptable harm: the target time to have it running again after an incident.

Downtime cost calculator →See also RPO, Restore testing

S

S3 Object Lock#Backup

An Amazon S3 feature that stores objects in write-once-read-many (WORM) form, so they can't be overwritten or deleted for a set retention period. It's one way to make cloud backups immutable.

DAR Assured Recovery →See also Immutable backup, Retention period

Shared responsibility model#Backup

The split of duties between a cloud or SaaS provider and its customer. In Microsoft 365, for example, Microsoft runs the service, while the customer is responsible for recovering its own data and accounts.

Microsoft 365 backup guide →See also Entra ID

T

Tape storage#Backup

Backup to magnetic tape cartridges. Tape that has been ejected and stored is physically offline, which makes it a natural air gap, and it's a second storage type under the 3-2-1-1-0 rule.

Spectra Logic tape →See also Air gap, 3-2-1-1-0 backup rule

Z

Zero trust#Compliance

A security model that verifies every user, device and request explicitly instead of trusting anything because it's inside the network. Applied to backup, it means even administrators need separate, verified access to the copies.

DAR Assured Recovery →See also Air gap, Immutable backup