Data destruction events—whether from ransomware encryption, an administrator’s mistaken bulk deletion, or a malicious insider covering their tracks—share a common characteristic: they typically succeed because the attacker or the mistake had sufficient privilege to modify or delete the data being protected. Traditional backup permissions, tied to the same administrative identity domain as production systems, do not reliably survive that scenario.
Making deletion structurally impossible, not just discouraged
Immutable storage enforces write-once, read-many semantics at the storage layer itself, making data genuinely undeletable and unmodifiable for a defined retention period regardless of what credentials an attacker or mistaken administrator holds. This is a fundamentally different guarantee than access controls or permissions, which can be bypassed by anyone with sufficient privilege; immutability holds even against a fully compromised administrative account.
Retention periods should be set deliberately based on how long an organization might realistically take to detect a sophisticated, slow-moving compromise, since some attackers deliberately wait weeks before triggering encryption specifically to age out shorter backup retention windows.
JIG helps organizations design immutable storage architectures that provide a genuine last line of defense when other controls fail.