<b>If your backups can be deleted, ransomware will delete them first.</b>

<b>If your backups can be deleted, ransomware will delete them first.</b>
Modern ransomware crews don't encrypt on day one. They sit for weeks, find your backup server, your S3 bucket, your NAS, and they wipe or encrypt those FIRST. Then they hit prod. Now you have nothing to restore from and a ransom note.
The only counter is immutability: object lock, write-once retention, append-only repos with keys the production box never holds.
A backup your admin account can delete is a backup the attacker can delete.
Mutable backups in a ransomware era are theater. Fight me.