boltEssential 8

Regular backups

11 controls in this part of theEssential Eight mitigation strategies. Each control links to plain-English guidance, audit tips and cross-framework mappings.

E8-RB-ML1.1

Backups aligned with business continuity needs

Ensure backups match business needs and help restore data after incidents.

E8-RB-ML1.2

Ensure backups are synchronised for restoration to a common point in time

Ensure data, applications, and settings are backed up together to restore them to the same point in

E8-RB-ML1.3

Backups retained securely and resiliently

Ensure backups are kept securely and can withstand failures.

E8-RB-ML1.4

Test backup restoration to a common point during disaster recovery

Ensure data and apps can be restored to a common point using backups in disaster scenarios.

E8-RB-ML1.5

Unprivileged accounts cannot access others' backups

Ensure that unprivileged accounts can't access other users' backups.

E8-RB-ML1.6

Prevent unprivileged accounts from modifying and deleting backups

Ensure non-admin users cannot change or remove backup files.

E8-RB-ML2.1

Prevent privileged accounts from accessing others' backups

Ensure only backup administrators can access all backup data.

E8-RB-ML2.2

Privileged accounts cannot modify or delete backups.

Ensure privileged users can't change or remove backups, except backup admins.

E8-RB-ML3.1

Unprivileged accounts cannot access their own backups

Ensure basic user accounts are unable to access or manage their backup data.

E8-RB-ML3.2

Privileged accounts cannot access their own backups

Ensure accounts with special access cannot view their own backup data.

E8-RB-ML3.3

Backup administrators cannot modify or delete backups during retention

Ensure backup admins can't change or remove backups until retention ends.

Back to the full Essential Eight control list, or browse the complete control library.

Regular backups

Control status

New task