SECURITY ATLAS / EVALUATION BRIEF
Acronis Cyber Protect Cloud
Research reviewed: 2026-10-18
https://atlasofsecurity.com/landscape/vendors/acronis-cyber-protect-cloud/

THE ATLAS TAKE
Acronis Cyber Protect Cloud is a practical candidate for service-provider-led protection where backup and security operations need a common workflow. The important diligence is in the selected package and workload support. Safe recovery, for example, has specific Windows, backup-type and filesystem limits that should be visible in the service design. Atlas would test the customer-facing restoration outcome and the provider handoff rather than accept an integrated-platform label as proof of complete coverage. Preserving data, scanning it and restoring a working service remain distinct acceptance criteria even when delivered through one console.

SCOPE
This entry uses the Cyber Protect Cloud service documentation. Provider packaging and feature availability vary. Safe recovery is limited to supported Windows machine or volume backups and does not scan non-NTFS volumes; CDP backups have a separate limitation.

WORTH A LOOK WHEN
Service-provider or IT teams protecting supported workloads with clearly documented recovery responsibilities.

THINK TWICE WHEN
The requirement assumes safe-recovery scanning covers every operating system, filesystem and backup format.

IMPLEMENTATION
1. Agree the service contract
Map the selected package to protected workloads, storage, monitoring and who authorizes a customer restore.

2. Check recovery compatibility
Record agent, operating system, filesystem and backup type against the documented recovery matrix.

3. Exercise a customer restoration
Recover safe test data, capture scan status and validate the application while tracking provider/customer handoffs.

OPERATING REALITY
The provider and customer must agree who maintains agents, backup jobs, storage and restoration authority. Security findings also need a response owner. A restore report should state which data was actually scanned and which was restored without scanning, especially for mixed filesystems or backup formats with documented limitations.

COMMERCIAL CONSIDERATIONS
Obtain the actual provider package and workload pricing rather than assuming uniform platform packaging. Include storage retention, security additions, support and restore assistance.
- Provider package and protected workload types
- Storage retention and selected protection modules
- Agent operations and customer restore support

EVALUATION PLAN / PROPOSED TESTS, NOT COMPLETED RESULTS
1. Recover a supported Windows NTFS test backup
Acceptance evidence: Keep scan status and verified restored data.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

2. Review a non-NTFS or CDP test case
Acceptance evidence: Document the actual unsupported scan boundary and chosen alternative procedure.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

3. Restore a small customer application
Acceptance evidence: Record authorizations, elapsed time and functional validation.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

QUESTIONS FOR THE VENDOR
- Is this retention setting controlled by the provider or the customer?
- Which volumes are restored without antimalware scanning?
- Can the workload recover if its normal installed agent is unavailable?

EVIDENCE GAPS
- Atlas has not independently tested malware scanning or restore performance.
- Confirm provider packaging, service region and exact workload compatibility.

SOURCES
Acronis: backup and recovery (Documentation)
https://www.acronis.com/en/support/documentation/CyberProtectionService/backup-and-recovery.html
Acronis: safe recovery and limitations (Documentation)
https://www.acronis.com/en/support/documentation/CyberProtectionService/safe-recovery.html
Acronis: recovery method matrix (Documentation)
https://www.acronis.com/en/support/documentation/CyberProtectionService/recovery-cheat-sheet.html

Use synthetic fixtures in an authorized environment. Agree rollback and acceptance criteria before enforcement.
Documentation research and Atlas analysis. Independent hands-on effectiveness, effort, and complete price remain unassessed.