Privileged user accounts (excluding backup administrator accounts) are prevented from modifying and deleting backups.
Topic
Backup modification and deletion
Applicable to
all
History
Sep 2024
Privileged user accounts (excluding backup administrator accounts) are prevented from modifying and deleting backups.
References to ‘privileged accounts’ were changed to ‘privileged user accounts’ in order to more closely match Microsoft Active Directory account types (i.e. ‘users’ and ‘computers’). Note, the definition of privileged accounts (which referred to such accounts as being a combination of privileged user accounts and privileged service accounts) has been removed. Privileged service accounts are now treated as a subset of privileged user accounts.
Dec 2022
Privileged accounts (excluding backup administrator accounts) are prevented from modifying and deleting backups.
Backup modification and deletion language associated with existing controls was amended to provide clarity of intent [ISM-1707, ISM-1708]. This included the introduction of a new control [ISM-1814].