Documentación y Recursos

Business Sector

Infrastructure & Data

1. Backup Scope

Fully protected

Partial

No backup

2. 3-2-1 Rule

Complies 3-2-1

Local only

Unknown

3. Anti-Ransomware Protection

Immutable

Basic

No protection

SaaS & Cloud Security

4. Microsoft 365 / Google Workspace

3rd party backup

Native only

No backup

5. Remote Work / Mobility

Protected

Partial

No control

Business Continuity & DR

6. RTO (Recovery Time Objective)

< 4 hours

4-24 hours

> 24 hours

7. Contingency Plan

Documented and tested

Exists but not tested

Does not exist

8. Data Sovereignty

EU/Spain

Mixed

Unknown

Governance & Compliance

9. Recovery Testing

Quarterly

Annual

Never

10. Monitoring and Alerts

24/7 Automated

Basic emails

No monitoring

Resilience and NIS2 Assessment