Adversaries may cause a denial of control to temporarily prevent operators and engineers from interacting with process controls. An affected process may still be operating during the period of control loss, but not necessarily in a desired state. Redundancy of Service can ensure continued operations if the system are compromised or unavailable. Data backup and storage systems are hardened and kept separate from the corporate network to prevent compromise. Maintain and exercise incident response plans to avoid compromise by keeping backup, storage and backup systems separate from corporate network.”]
Source: https://collaborate.mitre.org/attackics/index.php/Technique/T0813