Cleanroom recovery: Isolated Recovery Environments (IREs) for cyber resilience

Cleanroom recovery helps you test, investigate, and recover from cyber attacks in an isolated recovery environment.

Many disaster recovery plans handle outages, but they are not enough for targeted cyber attacks. A cleanroom site, also called an isolated recovery environment, gives you a clean place to recover data and restore operations.

Key features

Cleanroom recovery supports continuous testing, forensic analysis, and recovery in a secure isolated environment.

• Active Directory recovery and validation: Restore and validate domain controllers in an isolated environment to ensure authentication and identity services function correctly before bringing dependent applications back online.

• Continuous testing: Use the cleanroom site to simulate recovery scenarios and validate your cyber recovery plans.

• Forensic investigation: Analyze attack timelines, identify root causes, and safely test remediation steps before applying them to production.

• Recovery to an isolated environment: Recover clean data from backups and restore operations in a secure environment when production is compromised.

• Flexible deployment models: Cleanroom recovery can be deployed as a Commvault-managed isolated environment, where Commvault manages the infrastructure and lifecycle, or as a self-managed environment, giving you full control over architecture, security, and operations. This includes support for fully on-premises isolated recovery environments using HyperScale X (HSX) as an air-gapped vault and VMware ESXi. For more information, see On-premises cleanroom sites.

Support

Cleanroom recovery supports key resources for recovery to cloud and on-prem cleanroom sites.

Additional support boundaries

• Recovery configuration is standalone—recovery from and to a single server.

• Backups are:

  • Linux: Crash-consistent

  • Windows: Application-consistent

• File system subclients with the block-level backup setting enabled aren't supported.