Cleanroom strengthens your organization against cyber attacks with continuous testing, forensics, and recovery to an isolated recovery environment.
Many organizations have disaster recovery plans. These plans, though sufficient for natural disasters or unexpected hardware failures, aren't enough to recover from sophisticated, targeted cyber attacks.
A cleanroom site, also called "isolated recovery environment", is a cloud-based, completely secure environment where you recover your data in a known, clean state. With a well configured cleanroom site, you are prepared to prevent, investigate, and—when necessary—recover from cyber attacks.
Training video
For an introduction to Cleanroom, as well as onboarding and configuration instructions, see cleanroom training video.
Architecture
Key features
Cleanroom enhances cyber resilience by facilitating continuous testing, forensics, and recovery.
Continuous testing
Use the cleanroom site to continuously simulate cyber recovery and test your cyber recovery plans, identifying and addressing potential weaknesses before facing an actual attack.
Forensic investigation
In the cleanroom site, you can conduct forensic analysis to investigate the attack timeline, identify the attack’s origin, and gather evidence for potential legal proceedings.
Once vulnerabilities are identified, use the cleanroom site to develop, test, and deploy security patches in a safe and controlled environment before applying them to your production environment.
Cyber attack recovery to an isolated recovery environment
Even if some data is compromised in your production environment, you can use the cleanroom site to extract clean versions of critical data from uninfected backups.
When the integrity of your production environment is not certain, the cleanroom site is a safe and secure place to begin recovery while the production environment is remediated.
In completely compromised environments, a cleanroom site is a safe target to recover to and begin running your business from. If you need a new production environment, you can move workloads out of the cleanroom site.