E8 Guide | Regular Backups

Backups are essential for recovering from data loss, ransomware attacks, or system failure. The ACSC recommends regularly backing up important data, applications, and settings, storing backups in a secure location, and testing recovery processes. At present, Devicie and Microsoft Intune do not provide native system or data backup functionality. Customers must implement a separate backup solution to meet the requirements of this strategy.

What's Covered

Devicie does not deliver or manage backup services.

What’s Not Covered

The following areas are outside Devicie’s scope and remain the responsibility of the customer:

Creating and maintaining backups of user data, applications, or system configurations.
Scheduling and automating backup processes.
Testing backup restoration procedures.
Preventing unauthorised access to backups.
Ensuring backups are tamper-proof and protected from deletion or modification.

Potential Impact and Callouts

When implementing this Essential Eight mitigation strategy, it's important to understand the impacts on your environment and end users so that you can better plan your change processes.

Without an appropriate backup solution, recovery from ransomware or other incidents may be impossible.
Microsoft Intune and Devicie cannot be used as a substitute for dedicated backup and recovery tools.
Cloud file sync solutions like OneDrive offer version history but do not meet full backup requirements.

Devicie Delivered Controls

ML1	ML2	ML3
All ML1 controls are outside of endpoint scope.	All ML2 controls are outside of endpoint scope.	All ML3 controls are outside of endpoint scope.

Customer Responsibility

ML1	ML2	ML3
All ML1 controls are customer responsibility	All ML2 controls are customer responsibility	All ML3 controls are customer responsibility

💡 Tip: Use the Devicie Essential Eight report to view all controls broken down by strategy, maturity level and responsibility.