Air gap

Simple definition

A strong separation between a backup copy and the production system.

Technical definition

One air gap can be physical or logical and is intended to prevent an attacker who compromises production from immediately reaching the protected copy.

What is it used for ?

Keep at least one hard copy to destroy in a major compromise.

Practical example

A tape removed from the player or a remote repository with highly controlled access may be a form ofair gap.

Common issues

• Copy remaining permanently connected
• Recovery procedure not tested
• Off-site data too old

Related terms

Unchangeable backup · Rule 3.2-1 · Backup

Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.