Explain the role of system backups and data replication in OT resilience; considerations?

Explain the role of system backups and data replication in OT resilience; considerations?

• A. RPO/RTO are irrelevant to OT.
• B. Backups ensure data recoverability; offline copies help ransomware protection and data integrity.
• C. Replication provides availability; backups do not.
• D. Backups ensure data recoverability; replication can provide availability; consider RPO/RTO, offline/offsite copies, and protection against ransomware.

Answer: (D)

In OT resilience, you need both the ability to keep operations running and the ability to recover data after an incident. Backups provide this recoverability: they let you restore systems to a known-good state after events like corruption, user error, or malware. Keeping offline or offsite copies adds protection against ransomware and other threats that could compromise online data, because those copies aren’t connected to the network and can’t be encrypted or altered by an attacker. Replication supports availability by maintaining a near-real-time copy of data at another location, so systems can fail over with minimal downtime. However, replication alone doesn’t guarantee protection if the attacker also reaches the replicated copy; you still need to rely on backups (and offline/offsite copies) to ensure you can restore clean data. That’s why the best answer emphasizes both: backups for data recoverability, replication for availability, and planning around recovery objectives (RPO and RTO) along with offline/offsite copies and ransomware protection. This combination directly addresses how to maintain continuous OT operations while ensuring you can recover from data loss or malware.

In OT resilience, you need both the ability to keep operations running and the ability to recover data after an incident. Backups provide this recoverability: they let you restore systems to a known-good state after events like corruption, user error, or malware. Keeping offline or offsite copies adds protection against ransomware and other threats that could compromise online data, because those copies aren’t connected to the network and can’t be encrypted or altered by an attacker.

Replication supports availability by maintaining a near-real-time copy of data at another location, so systems can fail over with minimal downtime. However, replication alone doesn’t guarantee protection if the attacker also reaches the replicated copy; you still need to rely on backups (and offline/offsite copies) to ensure you can restore clean data.

That’s why the best answer emphasizes both: backups for data recoverability, replication for availability, and planning around recovery objectives (RPO and RTO) along with offline/offsite copies and ransomware protection. This combination directly addresses how to maintain continuous OT operations while ensuring you can recover from data loss or malware.