{"id":34265,"date":"2023-03-31T14:59:05","date_gmt":"2023-03-31T14:59:05","guid":{"rendered":"https:\/\/zpesystems.com\/?p=34265"},"modified":"2025-05-02T12:22:42","modified_gmt":"2025-05-02T19:22:42","slug":"build-a-secure-isolated-recovery-environment-zs","status":"publish","type":"post","link":"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/","title":{"rendered":"How to build a secure isolated recovery environment (SIRE)"},"content":{"rendered":"<p>[et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.19.5&#8243; _module_preset=&#8221;default&#8221; da_disable_devices=&#8221;off|off|off&#8221; global_colors_info=&#8221;{}&#8221; da_is_popup=&#8221;off&#8221; da_exit_intent=&#8221;off&#8221; da_has_close=&#8221;on&#8221; da_alt_close=&#8221;off&#8221; da_dark_close=&#8221;off&#8221; da_not_modal=&#8221;on&#8221; da_is_singular=&#8221;off&#8221; da_with_loader=&#8221;off&#8221; da_has_shadow=&#8221;on&#8221;][et_pb_row _builder_version=&#8221;4.19.5&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.19.5&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_image src=&#8221;https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg&#8221; alt=&#8221;An illustration of someone paying a ransom for their encrypted data, showing what can happen if an organization does not implement an isolated recovery environment (IRE).&#8221; title_text=&#8221;An illustration of someone paying a ransom for their encrypted data, showing what can happen if an organization does not implement an isolated recovery environment (IRE).&#8221; _builder_version=&#8221;4.20.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_image][et_pb_text admin_label=&#8221;Text&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p>Ransomware is one of the biggest cybersecurity threats to enterprises. <a href=\"https:\/\/www.sophos.com\/en-us\/content\/state-of-ransomware\">Sophos\u00a0<\/a>reports that in 2024, 59% of organizations suffered a ransomware attack, and the average cost to recover (excluding ransom payment) was $2.73 million. The frequency of ransomware attacks is so high that it\u2019s no longer a question of \u2018if,\u2019 but \u2018when\u2019 an organization will be hit. Since ransomware encrypts critical data, applications, and systems, an attack can be extremely disruptive to business. During prolonged downtime, revenue slows or stops altogether, recovery costs skyrocket, and the company\u2019s reputation and customers\u2019 trust are severely damaged.<\/p>\n<p>To reduce ransomware recovery times, companies must shift their focus away from prevention and detection and instead invest more time and money into recovery strategies. Ransomware recovery is especially challenging because of how easily its malicious code can spread from production into backup data and systems. What\u2019s needed, according to the experts at <a href=\"https:\/\/www.gartner.com\/en\/documents\/4002031\">Gartner<\/a>, is a designated, secure isolated recovery environment (SIRE) that\u2019s fully separated from the production infrastructure.<\/p>\n<p>[\/et_pb_text][et_pb_text admin_label=&#8221;ToC&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Table of Contents<\/b><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li><a href=\"#1\">What is a secure isolated recovery environment?\u00a0<\/a><\/li>\n<li><a href=\"#2\">How to build a secure isolated recovery environment\u00a0<\/a><\/li>\n<li><a href=\"#3\">Survivable data\u00a0<\/a><\/li>\n<li><a href=\"#4\">Separation and isolation\u00a0<\/a><\/li>\n<li><a href=\"#5\">Designated infrastructure\u00a0<\/a><\/li>\n<li><a href=\"#6\">Additional resources\u00a0<\/a><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>[\/et_pb_text][et_pb_text admin_label=&#8221;Text&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2 id=\"1\">What is a secure isolated recovery environment (SIRE)?<\/h2>\n<p>A recovery environment is made up of systems and network resources that are dedicated to recovering from ransomware and other cybersecurity breaches. The recovery environment is where teams work to restore data and rebuild applications before they\u2019re pushed back to the production network.<\/p>\n<p>Many organizations implement a recovery environment by creating an isolated VLAN on the enterprise network. However, if the recovery environment has any dependencies on the production network, there\u2019s a risk that ransomware will cut off access. For example, if malware infects authentication systems, routers, or switches, then admins might lose access to the recovery VLAN. In addition, production dependencies provide a way for ransomware to jump to the recovery environment, reinfecting systems and spoiling recovery efforts.<\/p>\n<p>A secure isolated recovery environment (SIRE) uses a designated network infrastructure that\u2019s completely separate from the production environment. The SIRE uses tools like Retention Lock, role-based access control (RBAC), and <a href=\"https:\/\/zpesystems.com\/solutions\/out-of-band-management-solutions-zs\/\">out-of-band (OOB) management<\/a> to ensure that admins can quickly recover critical business services without the risk of reinfection. Let\u2019s discuss these components in greater detail, as well as how to implement them to create an IRE.<\/p>\n<h2 id=\"2\">How to build a secure isolated recovery environment<\/h2>\n<p>The ideal SIRE is built around three concepts: survivable data, separation and isolation, and designated infrastructure.<\/p>\n<p>[\/et_pb_text][et_pb_image src=&#8221;https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/build-an-isolated-recovery-environment.png&#8221; alt=&#8221;build an isolated recovery environment&#8221; title_text=&#8221;build an isolated recovery environment&#8221; _builder_version=&#8221;4.20.2&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_image][et_pb_text admin_label=&#8221;Text&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h3 id=\"3\">Survivable data<\/h3>\n<p>Ransomware earned its name because it encrypts data and systems and demands a ransom (typically in the form of cryptocurrency) to get the decryption key. However, there\u2019s no guarantee that the attackers will provide a valid decryption key upon receiving their bounty, so it\u2019s best to avoid the cost and risk altogether by ensuring you have clean backup data. These backups are known as survivable data \u2013 data that can\u2019t be removed or encrypted by attackers.<\/p>\n<p>To ensure your backup data is survivable, you should implement:<\/p>\n<ul style=\"margin-left: 30px;\">\n<li aria-level=\"1\"><b>Immutability: <\/b>Something is considered immutable if it can\u2019t be changed in any way, such as <a href=\"https:\/\/zpesystems.com\/immutable-infrastructure-challenges-zs\/\">immutable infrastructure<\/a>. Immutable data backups can\u2019t be modified once they\u2019re in place, which makes it impossible for ransomware and other malware to encrypt or corrupt the files. Data immutability can be enforced with tools such as<a href=\"https:\/\/www.dell.com\/support\/kbdoc\/en-us\/000079803\/data-domain-retention-lock-frequently-asked-questions-faq#:~:text=Retention%20lock%20is%20a%20feature,until%20their%20retention%20period%20expires.\" target=\"_blank\" rel=\"noopener\"> Retention Lock<\/a>.<\/li>\n<li aria-level=\"1\"><b>Encryption: <\/b>For backup data to be survivable, it must be encrypted both in transit and at rest. This is sort of like fighting fire with fire \u2013 if your data is already encrypted, it will be much harder for ransomware to apply its own encryption. Plus, encrypting data in transit makes it harder for attackers to intercept and steal it as it\u2019s moving between your production, backup, and recovery environments.<\/li>\n<li aria-level=\"1\"><b>RBAC: <\/b>Role-based access control, or RBAC, refers to policies that restrict access based on an account\u2019s role or function (e.g., \u2018administrators,\u2019 or \u2018human resources\u2019). Ideally, only the key personnel involved in recovery operations (their role may be \u2018recovery engineers,\u2019 for example) will have access to backup systems, which limits the risk that over-privileged accounts will be compromised and used to exfiltrate data.<\/li>\n<li aria-level=\"1\"><b>MFA: <\/b>Multi-factor authentication, or MFA, forces users to prove their identity in multiple ways before they can access a system or application. For example, an admin may need to provide their username and password, plus a six-digit code sent to their authorized mobile device or email address, to prove that they are who they say they are. If an attacker steals an admin\u2019s username and password, MFA prevents them from being able to access, steal, or encrypt backup systems.<\/li>\n<\/ul>\n<h3 id=\"4\">Separation and isolation<\/h3>\n<p>Recovery efforts need to take place in an isolated environment so there\u2019s no risk that malware will cross over from the production network. Newly recovered systems, applications, and data also need to be scanned and verified to ensure they\u2019re clean before they\u2019re reintegrated into production. The only way to achieve this is by building a completely isolated environment using a designated network infrastructure.<\/p>\n<h3 id=\"5\">Designated infrastructure<\/h3>\n<p>The SIRE needs to be both physically and logically separated from the production network to ensure there\u2019s a completely clean environment in which to perform system, application, and data restoration. That means the SIRE should have its own routers, switches, storage devices, compute options, and power. In addition, the SIRE needs its own <a href=\"https:\/\/zpesystems.com\/in-band-vs-out-of-band-management-zs\/\">out-of-band (OOB)<\/a> control plane that\u2019s accessible via a dedicated network interface (such as 4G or 5G cellular). This will ensure that admins have continuous remote access to the SIRE even if the LAN or WAN goes down due to configuration errors or other problems.<\/p>\n<p><img decoding=\"async\" class=\"wp-image-227263 alignnone size-full\" src=\"https:\/\/zpesystems.com\/wp-content\/uploads\/2024\/10\/IMI-with-Nodegrid.jpg\" alt=\"How the Nodegrid Net SR isolates and protects the management network.\" width=\"1505\" height=\"1080\" srcset=\"https:\/\/zpesystems.com\/wp-content\/uploads\/2024\/10\/IMI-with-Nodegrid.jpg 1505w, https:\/\/zpesystems.com\/wp-content\/uploads\/2024\/10\/IMI-with-Nodegrid-1280x918.jpg 1280w, https:\/\/zpesystems.com\/wp-content\/uploads\/2024\/10\/IMI-with-Nodegrid-980x703.jpg 980w, https:\/\/zpesystems.com\/wp-content\/uploads\/2024\/10\/IMI-with-Nodegrid-480x344.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) and (max-width: 1280px) 1280px, (min-width: 1281px) 1505px, 100vw\" \/><\/p>\n<p>Image: Deploying a SIRE is only possible through the use of a dedicated control plane, or <a href=\"https:\/\/go.zpesystems.com\/rs\/004-BTR-463\/images\/Solution-Guide-Isolated-Management-Infrastructure.pdf\">Isolated Management Infrastructure<\/a> shown here.<\/p>\n<p>Teams will also need access to their security and build tools in the SIRE, so these need to be configured and ready to go before an attack occurs. Organizations also must ensure the secure isolated recovery environment has enough storage to handle all of the backup data and server rebuilds.<\/p>\n<h2 id=\"6\">Additional resources for building a secure isolated recovery environment (SIRE)<\/h2>\n<p>A secure isolated recovery environment (SIRE) ensures that admins have a dedicated environment in which to rebuild and restore critical business services during a ransomware attack. Survivable data backups, complete isolation, and designated infrastructure are needed to maintain the integrity of recovery operations and prevent reinfection.<\/p>\n<p><b>For more information about how to recover from ransomware using a secure isolated recovery environment, download our whitepaper, <a href=\"https:\/\/zpesystems.com\/resources\/media-library\/ebooks-whitepapers\/3-steps-to-ransomware-recovery\/\">3 Steps to Ransomware Recovery<\/a>.<\/b><\/p>\n<p>Implementing and using a SIRE requires Isolated Management Infrastructure. IMI provides the management foundation and is a best practice recommended by CISA, because it fully separates admin access from relying on production infrastructure. Through IMI, teams gain a host of capabilities including out-of-band management and remote access, which not only help with ransomware recovery, but also for break\/fix troubleshooting, device monitoring, and outage recovery. The ZPE Systems team created the blueprint that organizations can use to implement this crucial IMI foundation.<\/p>\n<p><b>To get the blueprint for building Isolated Management Infrastructure, download the <\/b><a href=\"https:\/\/zpesystems.com\/network-automation-blueprint\/\"><b>Network Automation Blueprint<\/b><\/a><b>.<\/b><\/p>\n<p>[\/et_pb_text][et_pb_text admin_label=&#8221;CTA&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; text_text_color=&#8221;#FFFFFF&#8221; background_color=&#8221;#358AAF&#8221; custom_margin=&#8221;||||true|false&#8221; custom_padding=&#8221;30px|30px|30px|30px|true|true&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2>Want to see the Secure Isolated Recovery Environment in action?<\/h2>\n<p><b>Our engineers are ready to show you what it takes to recover from ransomware. Click the button to get in touch, and we&#8217;ll walk you through IMI, out-of-band, and the Secure Isolated Recovery Environment. <\/b><\/p>\n<p><a class=\"HSSTYLEDCTA\" href=\"https:\/\/zpesystems.com\/contact\/\">Contact Us<\/a><\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A secure isolated recovery environment (SIRE) uses designated network infrastructure and survivable data to help teams recover from ransomware faster and with less impact to the business.<\/p>\n","protected":false},"author":5,"featured_media":34268,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","content-type":"","footnotes":""},"categories":[92,88,82,80,90,81],"tags":[],"class_list":["post-34265","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-consolidation","category-failover-connectivity","category-out-of-band-management","category-simplify-branch-infrastructure","category-vendor-neutral-platform","category-virtualization"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v26.0) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to build a secure isolated recovery environment (SIRE) - ZPE Systems<\/title>\n<meta name=\"description\" content=\"Learn how organizations can use a secure isolated recovery environment (SIRE) to recover from ransomware faster and with less risk of reinfection.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to build a secure isolated recovery environment (SIRE)\" \/>\n<meta property=\"og:description\" content=\"Cellular data networks can be used for LTE failover as well as remote out-of-band management, but these two technologies provide different capabilities.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/\" \/>\n<meta property=\"og:site_name\" content=\"ZPE Systems\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-31T14:59:05+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-02T19:22:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordan Baker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:description\" content=\"Cellular data networks can be used for LTE failover as well as remote out-of-band management, but these two technologies provide different capabilities.\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordan Baker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/\",\"url\":\"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/\",\"name\":\"How to build a secure isolated recovery environment (SIRE) - ZPE Systems\",\"isPartOf\":{\"@id\":\"https:\/\/zpesystems.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg\",\"datePublished\":\"2023-03-31T14:59:05+00:00\",\"dateModified\":\"2025-05-02T19:22:42+00:00\",\"author\":{\"@id\":\"https:\/\/zpesystems.com\/#\/schema\/person\/822694040abba23b5253766566cd1567\"},\"description\":\"Learn how organizations can use a secure isolated recovery environment (SIRE) to recover from ransomware faster and with less risk of reinfection.\",\"breadcrumb\":{\"@id\":\"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/#primaryimage\",\"url\":\"https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg\",\"contentUrl\":\"https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg\",\"width\":1000,\"height\":707,\"caption\":\"An illustration of someone paying a ransom for their encrypted data, showing what can happen if an organization does not implement an isolated recovery environment (IRE).\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/zpesystems.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to build a secure isolated recovery environment (SIRE)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/zpesystems.com\/#website\",\"url\":\"https:\/\/zpesystems.com\/\",\"name\":\"ZPE Systems\",\"description\":\"Rethink the Way Networks are Built and Managed\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/zpesystems.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/zpesystems.com\/#\/schema\/person\/822694040abba23b5253766566cd1567\",\"name\":\"Jordan Baker\",\"url\":\"https:\/\/zpesystems.com\/author\/jordan\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to build a secure isolated recovery environment (SIRE) - ZPE Systems","description":"Learn how organizations can use a secure isolated recovery environment (SIRE) to recover from ransomware faster and with less risk of reinfection.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/","og_locale":"en_US","og_type":"article","og_title":"How to build a secure isolated recovery environment (SIRE)","og_description":"Cellular data networks can be used for LTE failover as well as remote out-of-band management, but these two technologies provide different capabilities.","og_url":"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/","og_site_name":"ZPE Systems","article_published_time":"2023-03-31T14:59:05+00:00","article_modified_time":"2025-05-02T19:22:42+00:00","og_image":[{"width":1000,"height":707,"url":"https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg","type":"image\/jpeg"}],"author":"Jordan Baker","twitter_card":"summary_large_image","twitter_description":"Cellular data networks can be used for LTE failover as well as remote out-of-band management, but these two technologies provide different capabilities.","twitter_misc":{"Written by":"Jordan Baker","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/","url":"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/","name":"How to build a secure isolated recovery environment (SIRE) - ZPE Systems","isPartOf":{"@id":"https:\/\/zpesystems.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/#primaryimage"},"image":{"@id":"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/#primaryimage"},"thumbnailUrl":"https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg","datePublished":"2023-03-31T14:59:05+00:00","dateModified":"2025-05-02T19:22:42+00:00","author":{"@id":"https:\/\/zpesystems.com\/#\/schema\/person\/822694040abba23b5253766566cd1567"},"description":"Learn how organizations can use a secure isolated recovery environment (SIRE) to recover from ransomware faster and with less risk of reinfection.","breadcrumb":{"@id":"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/#primaryimage","url":"https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg","contentUrl":"https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg","width":1000,"height":707,"caption":"An illustration of someone paying a ransom for their encrypted data, showing what can happen if an organization does not implement an isolated recovery environment (IRE)."},{"@type":"BreadcrumbList","@id":"https:\/\/zpesystems.com\/build-a-secure-isolated-recovery-environment-zs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zpesystems.com\/"},{"@type":"ListItem","position":2,"name":"How to build a secure isolated recovery environment (SIRE)"}]},{"@type":"WebSite","@id":"https:\/\/zpesystems.com\/#website","url":"https:\/\/zpesystems.com\/","name":"ZPE Systems","description":"Rethink the Way Networks are Built and Managed","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zpesystems.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/zpesystems.com\/#\/schema\/person\/822694040abba23b5253766566cd1567","name":"Jordan Baker","url":"https:\/\/zpesystems.com\/author\/jordan\/"}]}},"rttpg_featured_image_url":{"full":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg",1000,707,false],"landscape":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg",1000,707,false],"portraits":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg",1000,707,false],"thumbnail":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE.-150x150.jpg",150,150,true],"medium":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE.-300x212.jpg",300,212,true],"large":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg",1000,707,false],"1536x1536":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg",1000,707,false],"2048x2048":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg",1000,707,false],"et-pb-post-main-image":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE.-400x250.jpg",400,250,true],"et-pb-post-main-image-fullwidth":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE.-1000x675.jpg",1000,675,true],"et-pb-portfolio-image":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE.-400x284.jpg",400,284,true],"et-pb-portfolio-module-image":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE.-510x382.jpg",510,382,true],"et-pb-portfolio-image-single":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg",1000,707,false],"et-pb-gallery-module-image-portrait":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE.-400x516.jpg",400,516,true],"et-pb-post-main-image-fullwidth-large":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg",1000,707,false],"et-pb-image--responsive--desktop":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE..jpg",1000,707,false],"et-pb-image--responsive--tablet":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE.-980x693.jpg",779,551,true],"et-pb-image--responsive--phone":["https:\/\/zpesystems.com\/wp-content\/uploads\/2023\/03\/An-illustration-of-someone-paying-a-ransom-for-their-encrypted-data-showing-what-can-happen-if-an-organization-does-not-implement-an-isolated-recovery-environment-IRE.-480x339.jpg",382,270,true]},"rttpg_author":{"display_name":"Jordan Baker","author_link":"https:\/\/zpesystems.com\/author\/jordan\/"},"rttpg_comment":0,"rttpg_category":"<a href=\"https:\/\/zpesystems.com\/category\/simplify-branch-infrastructure\/consolidation\/\" rel=\"category tag\">Consolidation<\/a> <a href=\"https:\/\/zpesystems.com\/category\/minimize-impact-of-disruptions\/failover-connectivity\/\" rel=\"category tag\">Failover Connectivity<\/a> <a href=\"https:\/\/zpesystems.com\/category\/remote-network-management\/out-of-band-management\/\" rel=\"category tag\">Out of Band Management<\/a> <a href=\"https:\/\/zpesystems.com\/category\/simplify-branch-infrastructure\/\" rel=\"category tag\">Simplify Branch Infrastructure<\/a> <a href=\"https:\/\/zpesystems.com\/category\/simplify-branch-infrastructure\/vendor-neutral-platform\/\" rel=\"category tag\">Vendor Neutral Platform<\/a> <a href=\"https:\/\/zpesystems.com\/category\/simplify-branch-infrastructure\/virtualization\/\" rel=\"category tag\">Virtualization<\/a>","rttpg_excerpt":"A secure isolated recovery environment (SIRE) uses designated network infrastructure and survivable data to help teams recover from ransomware faster and with less impact to the business.","_links":{"self":[{"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/posts\/34265","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/comments?post=34265"}],"version-history":[{"count":10,"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/posts\/34265\/revisions"}],"predecessor-version":[{"id":228250,"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/posts\/34265\/revisions\/228250"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/media\/34268"}],"wp:attachment":[{"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/media?parent=34265"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/categories?post=34265"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zpesystems.com\/wp-json\/wp\/v2\/tags?post=34265"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}