A European bank’s tabletop exercise found a single point of failure nobody had drawn: backup repositories authenticated against the same Active Directory as production, meaning the credential that would encrypt the estate was also the credential that could destroy the means of recovering it. Retention was enforced by the backup application — switchable by anyone with admin rights. Every repository sat on a standing network path. UPC Cyber vault added a separate domain entirely — its own identity, WORM storage-layer immutability no account can override, an air-gapped transfer window only, and AI-driven validation testing restorability and scanning for malicious code on every copy before it’s needed.
