Designing Nordkap Industries' backup isolation on the assumption that the adversary already holds admin: the red-team tabletop that destroyed every restore point on paper in 47 minutes, through an alert sent to an encrypted mailbox, a repository encrypted over SMB and a governance-mode lock bypassed; the isolation funnel of eight narrowing stages — threat model, architecture patterns, identity separation, immutability, network and air-gap, scenario testing, clean recovery and assurance — ending in the Isolation Assurance File; and the proof, eight scenarios covering all five adversary roles and eleven destructive actions, a root bypass of the compliance-mode lock denied, and seven of nine risks closed.

CY-EXPERT-050Expert Level · Ransomware Readiness

Backup Isolation Scenario Design — The Isolation Funnel

An expert-level course in designing backup isolation that still holds when the adversary already has admin, and proving it with authorised scenario tests. Work the isolation funnel - eight narrowing stages a recovery copy must pass before it can be called isolated: Threat Model, Architecture Patterns, Identity Separation, Immutability, Network and Air-Gap, Scenario Testing, Clean Recovery and Assurance - as the recovery architecture lead of a 27-plant manufacturer whose red-team tabletop destroyed every restore point on paper in 47 minutes, building an Isolation Assurance File one component per chapter with real role inventories, vault and tenant separation, multi-person authorisation, compliance-mode locks, default-deny networks and air-gap windows, control tests in an isolated recovery environment, clean-recovery rehearsals and insurer-grade metrics. Four hands-on activities in every lesson.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Build a backup threat model that assumes privileged compromise and design isolation patterns, identity separation, unliftable locks and network air gaps that leave at least one copy out of every adversary role's reach.
Write scenario libraries as assumption, control, evidence and pass-criterion records, and verify them with decision tabletops and authorised control tests in an isolated recovery environment.
Recover clean from isolated copies by choosing the last clean restore point from integrity evidence, scanning and sweeping on restore, rebuilding identity first and measuring RTO.
Measure isolation coverage, immutability share, approval coverage, scenario pass rate and clean-recovery RTO, and turn them into qualified attestations, a funded roadmap and a hash-manifested assurance file.

Price:৳12,000