[flipper35]

We have terabytes of data and the software we use has a separate account to the storage to help prevent those backups from getting corrupted. It is for disaster recovery and not really backup/restore and is more of a hybrid than what would normally be a full backup and incremental then repeat.

We do training and if the users don't do the training they are not eligible for any bonus or raises. We also use a pretty good suite for software. Basically anything not whitelisted runs in a honeypot first to see what the behavior is. Lots of people don't like it because it inhibits them installing things like an advent calendar or whatever. I don't give a rats pajamas since it is a work machine it can run what we approve and don't care if they want something else.

We do have random testing often as well and anyone that fails gets additional remedial training as well. That training is 3x longer than the regular since it assumes they did not understand something with the original training and the remedial is much more in depth.

It is hard keeping up with all the threats. I get a ton of alerts every day on new threats from several security associations.

All that said, no one is invulnerable, we just mitigate as well as we can.