Adriatic Tech Summit 2027

05/04/2027, Congress Center Hotel Hills
Ilidža, Bosnia and Herzegovina

When the tenant burns: Ransomware-resilient Backup & DR Architecture in Azure

Most Azure backup designs quietly assume the attacker never gets tenant admin. Ransomware operators have learned better: groups exfiltrate, then delete the backups, then encrypt, so the recovery plane is the first thing they burn. This session rebuilds backup and disaster recovery for a world where the production tenant is already compromised. We start with backup-plane isolation: dedicated backup subscriptions and a Resource Guard the vault admin doesn't own (ideally in a separate subscription or Entra tenant) so a compromised admin can't reach the backups that would save you. We treat immutability (locked and one-way), soft-delete, and multi-user authorization as engineered controls with real failure modes.