Immutable backup
A backup that can't be altered or deleted — even by an administrator or ransomware — for a set retention period.
For small firms
This is what actually defeats ransomware: attackers who get admin access still can't touch the backup copy.