{"id":7444,"date":"2026-10-12T13:03:19","date_gmt":"2026-10-12T11:03:19","guid":{"rendered":"https:\/\/eu.klytic.com\/dms-ransomware-obnova\/"},"modified":"2026-10-12T16:13:23","modified_gmt":"2026-10-12T14:13:23","slug":"dms-ransomware-obnova","status":"publish","type":"page","link":"https:\/\/eu.klytic.com\/cs\/dms-ransomware-obnova\/","title":{"rendered":"Ochrana syst\u00e9mu spr\u00e1vy dokument\u016f p\u0159ed ransomwarem a jeho obnova"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"7444\" class=\"elementor elementor-7444 elementor-6282\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a5c9765 e-con-full kly-g e-flex e-con e-parent\" data-id=\"a5c9765\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-915b702 e-con-full kly-g-hero e-flex e-con e-parent\" data-id=\"915b702\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-f1961a5 e-con-full kly-g-hero-in e-flex e-con e-parent\" data-id=\"f1961a5\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-871398e elementor-widget elementor-widget-text-editor\" data-id=\"871398e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-crumb\"><a href=\"\/\">Dom\u016f<\/a><span>\u203a<\/span>P\u0159\u00edru\u010dky<span>\u203a<\/span>Dokumenty a spr\u00e1va dokument\u016f (DMS)<\/p><p class=\"kly-g-pill\" style=\"--pill:#2dd4bf\">Dokumenty a spr\u00e1va dokument\u016f (DMS) \u00b7 Pochopit<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-24c9d3c elementor-widget elementor-widget-heading\" data-id=\"24c9d3c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Ochrana syst\u00e9mu spr\u00e1vy dokument\u016f p\u0159ed ransomwarem a jeho obnova<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dbec429 elementor-widget elementor-widget-text-editor\" data-id=\"dbec429\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-lead\">Syst\u00e9m spr\u00e1vy dokument\u016f se chr\u00e1n\u00ed souborem opat\u0159en\u00ed: \u00fa\u010dty a pr\u00e1va, kter\u00e1 omezuj\u00ed, co m\u016f\u017ee \u00fato\u010dn\u00edk za\u0161ifrovat, kontrolovan\u00e9 odkazy a synchronizovan\u00e9 po\u010d\u00edta\u010de a z\u00e1loha mimo dosah kompromitovan\u00e9ho \u00fa\u010dtu. Obnova je posloupnost krok\u016f: zastavit \u0161\u00ed\u0159en\u00ed, zvolit bod p\u0159ed za\u0161ifrov\u00e1n\u00edm, obnovit, ov\u011b\u0159it, znovu otev\u0159\u00edt. Co vzniklo mezi t\u00edmto bodem a incidentem, je ztraceno nebo se mus\u00ed znovu vytvo\u0159it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a4d46b5 elementor-widget elementor-widget-text-editor\" data-id=\"a4d46b5\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-meta\"><span>Aktualizov\u00e1no: <b>\u0159\u00edjen 2026<\/b><\/span><span><b>7 min<\/b><\/span><span>Citovan\u00e9 ofici\u00e1ln\u00ed zdroje<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d3f7678 e-con-full kly-g-body e-flex e-con e-parent\" data-id=\"d3f7678\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-5a967d0 e-con-full kly-g-article e-flex e-con e-parent\" data-id=\"5a967d0\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-addd3d6 elementor-widget elementor-widget-text-editor\" data-id=\"addd3d6\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Co ransomware d\u011bl\u00e1 se syst\u00e9mem spr\u00e1vy dokument\u016f<\/h2><p>Vyd\u00ed\u0159ac\u00ed software za\u0161ifruje soubory, ke kter\u00fdm m\u00e1 p\u0159\u00edstup, a pak \u017e\u00e1d\u00e1 v\u00fdkupn\u00e9 za kl\u00ed\u010d. V syst\u00e9mu spr\u00e1vy dokument\u016f jedn\u00e1 s pr\u00e1vy \u00fa\u010dtu nebo po\u010d\u00edta\u010de, kter\u00fd napadl. \u0160kody zhor\u0161uj\u00ed t\u0159i mechanismy:<\/p><ul><li><strong>synchronizace<\/strong>: napaden\u00fd po\u010d\u00edta\u010d za\u0161ifruje svou m\u00edstn\u00ed kopii a synchroniza\u010dn\u00ed klient pak ode\u0161le za\u0161ifrovan\u00e9 soubory na server jako b\u011b\u017enou zm\u011bnu a odtud do ostatn\u00edch za\u0159\u00edzen\u00ed;<\/li><li><strong>historie<\/strong>: ka\u017ed\u00fd za\u0161ifrovan\u00fd soubor se st\u00e1v\u00e1 novou verz\u00ed. Star\u0161\u00ed verze m\u016f\u017ee situaci zachr\u00e1nit, pokud \u00fato\u010dn\u00edk nem\u00e1 dostate\u010dn\u00e1 pr\u00e1va k vy\u010di\u0161t\u011bn\u00ed historie a ko\u0161e;<\/li><li><strong>z\u00e1loha<\/strong>: ANSSI konstatuje, \u017ee se \u00fato\u010dn\u00edk \u010dasto sna\u017e\u00ed z\u00e1lohovac\u00ed infrastrukturu za\u0161ifrovat, smazat nebo znep\u0159\u00edstupnit, aby zabr\u00e1nil obnov\u011b.<\/li><\/ul><p>N\u011bkter\u00e9 \u00fatoky data p\u0159ed za\u0161ifrov\u00e1n\u00edm tak\u00e9 zkop\u00edruj\u00ed. Obnova vr\u00e1t\u00ed soubory do p\u016fvodn\u00edho stavu. Tuto \u010d\u00e1st ale ne\u0159e\u0161\u00ed; ta spad\u00e1 do krizov\u00e9ho \u0159\u00edzen\u00ed a, jde-li o osobn\u00ed \u00fadaje, pod GDPR.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5f97160 elementor-widget elementor-widget-text-editor\" data-id=\"5f97160\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Omezit dosah \u00fatoku<\/h2><p>Nelze slibovat, \u017ee \u017e\u00e1dn\u00fd po\u010d\u00edta\u010d nebude napaden. Lze ale omezit, kam se napaden\u00fd po\u010d\u00edta\u010d nebo \u00fa\u010det dostane.<\/p><h3>Pr\u00e1va z\u00e1pisu<\/h3><p>\u00da\u010det, kter\u00fd m\u016f\u017ee slo\u017eku jen \u010d\u00edst, ji nem\u016f\u017ee za\u0161ifrovat. Referen\u010dn\u00ed slo\u017eky (\u0161ablony, postupy, podepsan\u00e9 smlouvy) mohou b\u00fdt pro v\u011bt\u0161inu lid\u00ed jen ke \u010dten\u00ed. Pr\u00e1va se nastavuj\u00ed podle skupin a slo\u017eek, ne syst\u00e9mem \u201ev\u0161ichni upravuj\u00ed v\u0161e\u201c.<\/p><h3>Administr\u00e1torsk\u00e9 \u00fa\u010dty<\/h3><p>ANSSI doporu\u010duje omezit tyto \u00fa\u010dty na nezbytn\u00e9 minimum. Mus\u00ed b\u00fdt jmenn\u00e9, chr\u00e1n\u011bn\u00e9 dvouf\u00e1zov\u00fdm ov\u011b\u0159en\u00edm a nesm\u00ed slou\u017eit k b\u011b\u017en\u00e9 pr\u00e1ci.<\/p><h3>Extern\u00ed odkazy<\/h3><p>Odkaz, kter\u00fd d\u00e1v\u00e1 nezn\u00e1m\u00e9mu pr\u00e1vo \u00fapravy, je otev\u0159en\u00e9 dve\u0159e. Odkazy sm\u011b\u0159uj\u00edc\u00ed ven maj\u00ed heslo, datum vypr\u0161en\u00ed a obvykle jen pr\u00e1vo \u010dten\u00ed.<\/p><h3>Synchronizovan\u00e9 po\u010d\u00edta\u010de<\/h3><p>Na ka\u017ed\u00e9m po\u010d\u00edta\u010di synchronizujte jen pot\u0159ebn\u00e9 slo\u017eky. Citliv\u00e9 slo\u017eky ponechte v prohl\u00ed\u017ee\u010di. Aktualizace instalujte rychle: ANSSI p\u0159ipom\u00edn\u00e1, \u017ee je z\u00e1sadn\u00ed prov\u00e1d\u011bt je v kr\u00e1tk\u00e9 lh\u016ft\u011b a podle \u0159\u00edzen\u00e9ho procesu. Nej\u010dast\u011bj\u0161\u00ed vstupn\u00ed branou z\u016fst\u00e1v\u00e1 e-mail: viz <a href='\/cs\/prilohy-odkazy-ransomware-e-mail\/'>p\u0159\u00edlohy, odkazy a ransomware<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a7ad06e elementor-widget elementor-widget-text-editor\" data-id=\"a7ad06e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Pro\u010d mus\u00ed b\u00fdt z\u00e1loha mimo dosah<\/h2><p>Z\u00e1loha p\u0159\u00edstupn\u00e1 stejn\u00fdm \u00fa\u010dtem jako produkce bude za\u0161ifrov\u00e1na spolu s n\u00ed. Ochr\u00e1n\u00ed ji t\u0159i druhy odd\u011blen\u00ed:<\/p><ul><li><strong>jin\u00e9 p\u0159ihla\u0161ovac\u00ed \u00fadaje<\/strong>: ANSSI po\u017eaduje jmenn\u00e9 a vyhrazen\u00e9 administr\u00e1torsk\u00e9 \u00fa\u010dty pro z\u00e1lohov\u00e1n\u00ed a infrastrukturu nez\u00e1vislou na produk\u010dn\u00edch adres\u00e1\u0159\u00edch;<\/li><li><strong>nem\u011bnnost<\/strong>: zapsanou z\u00e1lohu u\u017e nelze po dobu jej\u00edho uchov\u00e1v\u00e1n\u00ed zm\u011bnit ani smazat;<\/li><li><strong>jin\u00e1 lokalita<\/strong> a pokud mo\u017eno offline kopie: ANSSI ji pova\u017euje za nezbytnou a za robustn\u011bj\u0161\u00ed ne\u017e nem\u011bnnou z\u00e1lohu, kter\u00e1 z\u016fst\u00e1v\u00e1 online.<\/li><\/ul><p>Zb\u00fdv\u00e1 hloubka. Pr\u016fnik m\u016f\u017ee z\u016fstat n\u011bkolik t\u00fddn\u016f nepozorovan\u00fd, ne\u017e dojde k za\u0161ifrov\u00e1n\u00ed. Je-li retence krat\u0161\u00ed ne\u017e tato doba, mohou v\u0161echny dostupn\u00e9 z\u00e1lohy obsahovat \u00fato\u010dn\u00edka nebo ji\u017e po\u0161kozen\u00e9 soubory.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bbb22f9 elementor-widget elementor-widget-text-editor\" data-id=\"bbb22f9\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Po\u0159ad\u00ed obnovy<\/h2><p>Obnova nen\u00ed tla\u010d\u00edtko. Je to sled krok\u016f a na po\u0159ad\u00ed z\u00e1le\u017e\u00ed.<\/p><ol><li><strong>Zastavit \u0161\u00ed\u0159en\u00ed.<\/strong> Odpojit napaden\u00e9 po\u010d\u00edta\u010de od s\u00edt\u011b, pozastavit kompromitovan\u00e9 \u00fa\u010dty, vypnout synchronizaci a extern\u00ed odkazy v zasa\u017een\u00e9 oblasti. ANSSI tak\u00e9 rad\u00ed v\u00e9st \u010dasov\u011b ozna\u010den\u00fd den\u00edk ud\u00e1lost\u00ed, odpojit z\u00e1lohovac\u00ed m\u00e9dia po ov\u011b\u0159en\u00ed, \u017ee jsou \u010dist\u00e1, a nevyp\u00ednat stroje od nap\u00e1jen\u00ed, proto\u017ee to m\u016f\u017ee smazat u\u017eite\u010dn\u00e9 stopy.<\/li><li><strong>Ur\u010dit za\u010d\u00e1tek.<\/strong> Zjistit prvn\u00ed za\u0161ifrovan\u00fd soubor a dot\u010den\u00fd \u00fa\u010det a po\u010d\u00edta\u010d. Podle toho se stanov\u00ed bod obnovy.<\/li><li><strong>Zvolit bod obnovy<\/strong> p\u0159ed za\u0161ifrov\u00e1n\u00edm, s rezervou, pokud je datum nejist\u00e9.<\/li><li><strong>Obnovit<\/strong> do \u010dist\u00e9ho prost\u0159ed\u00ed. ANSSI doporu\u010duje p\u0159einstalovat ze zn\u00e1m\u00e9ho m\u00e9dia a pak obnovit data ze z\u00e1lohy po\u0159\u00edzen\u00e9 p\u0159ed kompromitac\u00ed. Pokud to n\u00e1stroj umo\u017e\u0148uje, obnova jen zasa\u017een\u00e9 oblasti zabr\u00e1n\u00ed p\u0159eps\u00e1n\u00ed pr\u00e1ce, kter\u00e1 mezit\u00edm vznikla jinde.<\/li><li><strong>Ov\u011b\u0159it.<\/strong> Nam\u00e1tkou otev\u0159\u00edt soubory, zkontrolovat, \u017ee nez\u016fstal \u017e\u00e1dn\u00fd za\u0161ifrovan\u00fd soubor, odstranit vstupn\u00ed zranitelnost, zm\u011bnit hesla.<\/li><li><strong>Postupn\u011b znovu otev\u0159\u00edt p\u0159\u00edstupy.<\/strong> Po\u010d\u00edta\u010de se znovu synchronizuj\u00ed z obnoven\u00e9ho serveru, nikdy naopak. Nevy\u010di\u0161t\u011bn\u00fd po\u010d\u00edta\u010d, kter\u00fd se znovu p\u0159ipoj\u00ed, ode\u0161le zp\u011bt sv\u00e9 za\u0161ifrovan\u00e9 soubory.<\/li><\/ol><p>Sou\u010dasn\u011b ANSSI doporu\u010duje nikdy neplatit v\u00fdkupn\u00e9, uchovat za\u0161ifrovan\u00e1 data (kl\u00ed\u010d m\u016f\u017ee b\u00fdt zve\u0159ejn\u011bn pozd\u011bji), podat trestn\u00ed ozn\u00e1men\u00ed a v p\u0159\u00edpad\u011b poru\u0161en\u00ed zabezpe\u010den\u00ed osobn\u00edch \u00fadaj\u016f zajistit, aby krizov\u00fd t\u00fdm ozn\u00e1mil incident CNIL.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d9f3a8f elementor-widget elementor-widget-text-editor\" data-id=\"d9f3a8f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Co se ztrat\u00ed: RPO v praxi<\/h2><p>Hypotetick\u00fd p\u0159\u00edpad. Kancel\u00e1\u0159 s dvaceti zam\u011bstnanci z\u00e1lohuje sv\u00e9 dokumenty ka\u017edou hodinu. V pond\u011bl\u00ed v 9:15 za\u010dne synchronizovan\u00fd po\u010d\u00edta\u010d \u0161ifrovat slo\u017eku \u201eKlienti\u201c. Poplach je vyhl\u00e1\u0161en v 10:05.<\/p><p>Posledn\u00edm \u010dist\u00fdm bodem je z\u00e1loha z 9:00. Slo\u017eka \u201eKlienti\u201c se vr\u00e1t\u00ed do stavu z 9:00. Zm\u011bny proveden\u00e9 v t\u00e9to slo\u017ece mezi 9:00 a 9:15 jsou ztraceny. Zm\u011bny v ostatn\u00edch slo\u017ek\u00e1ch ztraceny nejsou, pokud se obnova omez\u00ed na zasa\u017eenou slo\u017eku. Asistentka, kter\u00e1 v 9:10 ulo\u017eila t\u0159i dopisy, je najde ve sv\u00e9m e-mailu a ulo\u017e\u00ed je znovu.<\/p><p>Pr\u00e1v\u011b to m\u011b\u0159\u00ed RPO, maxim\u00e1ln\u00ed p\u0159\u00edpustn\u00e1 ztr\u00e1ta dat: rozd\u00edl mezi bodem obnovy a incidentem. RTO, maxim\u00e1ln\u00ed p\u0159\u00edpustn\u00e1 doba p\u0159eru\u0161en\u00ed, m\u011b\u0159\u00ed n\u011bco jin\u00e9ho: dobu, ne\u017e t\u00fdmy znovu pracuj\u00ed. O obou se rozhoduje p\u0159ed incidentem, ne b\u011bhem n\u011bj.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-11bcbda elementor-widget elementor-widget-text-editor\" data-id=\"11bcbda\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>\u010cast\u00e9 omyly<\/h2><ul><li><strong>Obnovovat d\u0159\u00edv, ne\u017e se zastav\u00ed \u0161\u00ed\u0159en\u00ed.<\/strong> Po\u010d\u00edta\u010d, kter\u00fd je st\u00e1le p\u0159ipojen\u00fd, obnoven\u00e9 soubory znovu za\u0161ifruje.<\/li><li><strong>Znovu synchronizovat z napaden\u00e9ho po\u010d\u00edta\u010de.<\/strong> M\u00edstn\u00ed kopie je ta za\u0161ifrovan\u00e1.<\/li><li><strong>Spol\u00e9hat na ko\u0161.<\/strong> Neobsahuje zm\u011bn\u011bn\u00e9 soubory, jen odstran\u011bn\u00e9.<\/li><li><strong>Zjistit retenci a\u017e v den D.<\/strong> Pokud k pr\u016fniku do\u0161lo p\u0159ed \u0161esti t\u00fddny a retence je t\u0159icet dn\u00ed, volba bodu obnovy se komplikuje.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dfaa1f0 elementor-widget elementor-widget-text-editor\" data-id=\"dfaa1f0\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>\u010cast\u00e9 dotazy<\/h2><h3>Sta\u010d\u00ed proti ransomwaru verzov\u00e1n\u00ed?<\/h3><p>Pom\u016f\u017ee, pokud je historie nedot\u010den\u00e1. Nesta\u010d\u00ed, pokud ji \u00fato\u010dn\u00edk mohl vy\u010distit. Rozd\u00edl vysv\u011btluje pr\u016fvodce <a href='\/cs\/verzovani-replikace-zalohovani-dokumentu\/'>verzov\u00e1n\u00ed, replikace a z\u00e1lohov\u00e1n\u00ed<\/a>.<\/p><h3>M\u00e1 se v\u00fdkupn\u00e9 zaplatit?<\/h3><p>ANSSI doporu\u010duje nikdy neplatit. Zaplacen\u00ed nezaru\u010duje ani kl\u00ed\u010d, ani to, \u017ee nedojde k dal\u0161\u00edmu \u00fatoku.<\/p><h3>Jak omezit, kdo m\u016f\u017ee slo\u017eku upravovat?<\/h3><p>Pomoc\u00ed pr\u00e1v podle skupiny a slo\u017eky. Viz <a href='\/cs\/pristupova-prava-dokumenty\/'>nastavit, kdo vid\u00ed kter\u00e9 dokumenty<\/a>.<\/p><h3>Jak zabr\u00e1nit tomu, aby se odkaz stal vstupn\u00ed branou?<\/h3><p>Heslem, datem vypr\u0161en\u00ed a pr\u00e1vem pouze ke \u010dten\u00ed. Viz <a href='\/cs\/odkazy-sdileni-dokumentu\/'>odkazy pro sd\u00edlen\u00ed, partne\u0159i a stahov\u00e1n\u00ed<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-534a117 kly-g-klytic elementor-widget elementor-widget-text-editor\" data-id=\"534a117\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Kde stoj\u00ed Klytic<\/h2><p>U Klytic Docs prob\u00edhaj\u00ed z\u00e1lohy ka\u017edou hodinu. Jsou \u0161ifrovan\u00e9, nem\u011bnn\u00e9, replikovan\u00e9 do v\u00edce lokalit, monitorovan\u00e9, uchov\u00e1van\u00e9 30 dn\u00ed a obnovy se testuj\u00ed ka\u017ed\u00fd m\u011bs\u00edc. C\u00edlem je RPO krat\u0161\u00ed ne\u017e 2 hodiny pro dokumenty a RTO krat\u0161\u00ed ne\u017e 4 hodiny. O obnovu se \u017e\u00e1d\u00e1 u podpory Klytic s uveden\u00edm rozsahu a p\u0159ibli\u017en\u00e9ho data. Je v cen\u011b, pokud ztr\u00e1ta vznikla nefunk\u010dnost\u00ed slu\u017eby Klytic. Po \u00fatoku vyd\u00ed\u0159ac\u00edho softwaru nebo napaden\u00ed \u00fa\u010dtu u v\u00e1s je obnova tak\u00e9 v cen\u011b, pokud byly va\u0161e po\u010d\u00edta\u010de spr\u00e1vn\u011b chr\u00e1n\u011bny: aktualizace nainstalovan\u00e9, antivirus aktivn\u00ed. Pokud byly chr\u00e1n\u011bny nedostate\u010dn\u011b, \u0159e\u0161\u00ed se placen\u00fdm tiketem podpory, stejn\u011b jako obnova po chybn\u00e9 manipulaci. Podrobnosti najdete na str\u00e1nce <a href='\/cs\/bezpecnost-a-zalohovani\/'>bezpe\u010dnost a z\u00e1lohov\u00e1n\u00ed<\/a>.<\/p><p>V oblasti prevence poskytuje Klytic Docs pr\u00e1va podle osoby, skupiny a slo\u017eky, dvouf\u00e1zov\u00e9 ov\u011b\u0159en\u00ed, z\u00e1znam p\u0159\u00edstup\u016f a odkazy chr\u00e1n\u011bn\u00e9 heslem s datem vypr\u0161en\u00ed. Na stran\u011b Klyticu jsou technick\u00e9 p\u0159\u00edstupy omezeny na provozn\u00ed \u010dinnosti a podporu, jsou jmenn\u00e9 a zaznamen\u00e1van\u00e9.<\/p><p>Omezen\u00ed: t\u0159icet dn\u00ed retence nepokryje kompromitaci zji\u0161t\u011bnou pozd\u011bji. Klytic obnovuje sv\u00e9 slu\u017eby; vy\u010di\u0161t\u011bn\u00ed va\u0161ich po\u010d\u00edta\u010d\u016f, s\u00edt\u011b a adres\u00e1\u0159e je v\u011bc\u00ed va\u0161eho IT t\u00fdmu nebo dodavatele. Klytic nen\u00ed nab\u00eddka s kvalifikac\u00ed SecNumCloud.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7207cc4 kly-g-disclaimer elementor-widget elementor-widget-text-editor\" data-id=\"7207cc4\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Tato str\u00e1nka popisuje obecn\u00fd r\u00e1mec. V p\u0159\u00edpad\u011b incidentu postupujte podle sv\u00e9ho pl\u00e1nu obnovy a pokyn\u016f p\u0159\u00edslu\u0161n\u00fdch org\u00e1n\u016f.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a016f06 kly-g-sources elementor-widget elementor-widget-text-editor\" data-id=\"a016f06\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Zdroje<\/h2><p>Konzultov\u00e1no v \u0159\u00edjnu 2026.<\/p><ul><li>ANSSI a ministerstvo spravedlnosti (DACG), \u201eAttaques par ran\u00e7ongiciels, tous concern\u00e9s\u201c (\u00datoky vyd\u00ed\u0159ac\u00edm softwarem se t\u00fdkaj\u00ed v\u0161ech), 2020: odpojen\u00e9 z\u00e1lohy, omezen\u00ed administr\u00e1torsk\u00fdch \u00fa\u010dt\u016f, rychl\u00e9 aktualizace; p\u0159i incidentu den\u00edk ud\u00e1lost\u00ed, izolace, nevyp\u00ednat nap\u00e1jen\u00ed, uchovat za\u0161ifrovan\u00e1 data, neplatit, podat trestn\u00ed ozn\u00e1men\u00ed, obnovit ze z\u00e1lohy po\u0159\u00edzen\u00e9 p\u0159ed kompromitac\u00ed. <a href='https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi-guide-attaques_par_rancongiciels_tous_concernes-v1.0.pdf' rel='noopener' target='_blank'>messervices.cyber.gouv.fr<\/a><\/li><li>ANSSI, \u201eSauvegarde des syst\u00e8mes d\u2019information\u201c (Z\u00e1lohov\u00e1n\u00ed informa\u010dn\u00edch syst\u00e9m\u016f), pr\u016fvodce ANSSI-BP-100, v1.1: \u00fato\u010dn\u00edk \u010dasto c\u00edl\u00ed na z\u00e1lohovac\u00ed infrastrukturu; vyhrazen\u00e9 \u00fa\u010dty; offline kopie robustn\u011bj\u0161\u00ed ne\u017e online WORM; PDMA a DMIA. <a href='https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi_fondamentaux_sauvegarde_systemes_dinformation_v1.1.pdf' rel='noopener' target='_blank'>messervices.cyber.gouv.fr<\/a><\/li><li>Klytic, Bezpe\u010dnost a z\u00e1lohov\u00e1n\u00ed: nem\u011bnn\u00e9, \u0161ifrovan\u00e9, replikovan\u00e9 z\u00e1lohy, 30 dn\u00ed, obnovy testovan\u00e9 ka\u017ed\u00fd m\u011bs\u00edc, RTO krat\u0161\u00ed ne\u017e 4 h, RPO krat\u0161\u00ed ne\u017e 2 h. <a href='https:\/\/www.klytic.com\/securite-sauvegarde\/' rel='noopener' target='_blank'>klytic.com<\/a><\/li><li>Klytic, Hosting a suverenita: technick\u00e9 p\u0159\u00edstupy omezen\u00e9 na provoz a podporu, jmenn\u00e9 a zaznamen\u00e1van\u00e9. <a href='https:\/\/www.klytic.com\/hebergement-souverainete\/' rel='noopener' target='_blank'>klytic.com<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2c31458 e-con-full kly-g-aside e-flex e-con e-parent\" data-id=\"2c31458\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b4db1ea elementor-widget elementor-widget-html\" data-id=\"b4db1ea\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"html.default\">\n\t\t\t\t\t<nav class=\"kly-g-toc\" aria-label=\"Na t\u00e9to str\u00e1nce\"><p>Na t\u00e9to str\u00e1nce<\/p><ol><\/ol><\/nav>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e1920d2 elementor-widget elementor-widget-text-editor\" data-id=\"e1920d2\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"kly-g-cta\"><h3>P\u0159ipravte obnovu je\u0161t\u011b p\u0159ed incidentem<\/h3><p>Zhodno\u0165me spole\u010dn\u011b va\u0161e pr\u00e1va, odkazy a retenci.<\/p><p><a class=\"kly-g-btn\" href=\"\/cs\/kontakt\/\">Promluvit s poradcem \u2192<\/a><\/p><p style=\"margin:0\"><a class=\"kly-g-btn ghost\" href=\"\/cs\/bezpecnost-a-zalohovani\/\">Bezpe\u010dnost a z\u00e1lohov\u00e1n\u00ed<\/a><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9fa9b84 e-con-full kly-g-related e-flex e-con e-parent\" data-id=\"9fa9b84\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c1352fe elementor-widget elementor-widget-text-editor\" data-id=\"c1352fe\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>P\u0159e\u010dt\u011bte si tak\u00e9<\/h2><div class=\"kly-g-grid\"><a class=\"kly-g-card\" href=\"\/cs\/verzovani-replikace-zalohovani-dokumentu\/\" style=\"--cat:#0d9488\"><span class=\"c\">Pochopit \u00b7 Dokumenty a spr\u00e1va dokument\u016f (DMS)<\/span><span class=\"t\">Verzov\u00e1n\u00ed, replikace a z\u00e1lohov\u00e1n\u00ed dokument\u016f<\/span><span class=\"q\">T\u0159i mechanismy, t\u0159i poruchy. Pro\u010d se syst\u00e9m spr\u00e1vy dokument\u016f, kter\u00fd u\u017e verzuje, mus\u00ed p\u0159esto z\u00e1lohovat, porucha po poru\u0161e.<\/span><span class=\"m\"><span>6 min \u010dten\u00ed<\/span><b>\u010c\u00edst \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/cs\/pristupova-prava-dokumenty\/\" style=\"--cat:#0d9488\"><span class=\"c\">Pou\u017e\u00edvat \u00b7 Dokumenty a spr\u00e1va dokument\u016f (DMS)<\/span><span class=\"t\">Nastavit, kdo vid\u00ed kter\u00e9 dokumenty<\/span><span class=\"q\">V Klytic Docs se p\u0159\u00edstupy nastavuj\u00ed podle \u00fa\u010dtu, skupiny a t\u00fdmov\u00e9 slo\u017eky. Kdo spravuje, jak\u00e1 pr\u00e1va nastavit a jak p\u0159\u00edstupy revidovat.<\/span><span class=\"m\"><span>6 min \u010dten\u00ed<\/span><b>\u010c\u00edst \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/cs\/odkazy-sdileni-dokumentu\/\" style=\"--cat:#0d9488\"><span class=\"c\">Pou\u017e\u00edvat \u00b7 Dokumenty a spr\u00e1va dokument\u016f (DMS)<\/span><span class=\"t\">Odkazy pro sd\u00edlen\u00ed, partne\u0159i a nahr\u00e1v\u00e1n\u00ed<\/span><span class=\"q\">Sd\u00edlet intern\u011b, poslat ven chr\u00e1n\u011bn\u00fd odkaz, spolupracovat s partnerem a vyhnout se necht\u011bn\u00e9mu sd\u00edlen\u00ed v Klytic Docs.<\/span><span class=\"m\"><span>7 min \u010dten\u00ed<\/span><b>\u010c\u00edst \u2192<\/b><\/span><\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-539316dd e-con e-atomic-element e-div-block-base e-default-div e-c9fd865-4a50 \" data-id=\"539316dd\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"539316dd\" data-e-type=\"e-div-block\" data-id=\"539316dd\">\n    <div class=\"elementor-element elementor-element-4f79afcb e-con e-atomic-element e-div-block-base e-default-div e-4fa9fe-ce86 \" data-id=\"4f79afcb\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"4f79afcb\" data-e-type=\"e-div-block\" data-id=\"4f79afcb\">\n    \t\t\t<p class=\"e-4dcf5c70-2ec7 e-paragraph-base e-default-p\" data-interaction-id=\"330a7a35\" data-e-type=\"widget\" data-id=\"330a7a35\">Uv\u00edtac\u00ed nab\u00eddka<\/p>\n\t\t\t\t\t<h2 data-interaction-id=\"56f1f7d5\" class=\"e-347faa43-4e20 e-heading-base e-default-h2\" data-e-type=\"widget\" data-id=\"56f1f7d5\">30 dn\u00ed zku\u0161ebn\u00ed verze zdarma a migrace s asistenc\u00ed<\/h2>\n\t\t\t\t\t<p class=\"e-7f6310da-1caa e-paragraph-base e-default-p\" data-interaction-id=\"2ce27288\" data-e-type=\"widget\" data-id=\"2ce27288\">Zku\u0161ebn\u00ed nab\u00eddka bez z\u00e1vazk\u016f. N\u00e1\u0161 poradce v\u00e1m zavol\u00e1, aby poznal va\u0161e pot\u0159eby a p\u0159ipravil va\u0161e prost\u0159ed\u00ed Klytic.<\/p>\n\t\t<div class=\"elementor-element elementor-element-35ea29a1 e-con e-atomic-element e-div-block-base e-default-div e-1cd48b22-e6da \" data-id=\"35ea29a1\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"35ea29a1\" data-e-type=\"e-div-block\" data-id=\"35ea29a1\">\n    \t\t\t<a href=\"\/essai-gratuit\/\" target=\"_self\" class=\"e-4a7886e3-652d e-button-base e-default-a\" data-interaction-id=\"19bfa8f1\" data-e-type=\"widget\" data-id=\"19bfa8f1\">\n\t\ud83d\ude80 Zah\u00e1jit zku\u0161ebn\u00ed verzi zdarma\n<\/a>\n\t\t\t\t\t<a href=\"\/tarifs\/\" target=\"_self\" class=\"e-137e863d-dd0d e-button-base e-default-a\" data-interaction-id=\"326d82ab\" data-e-type=\"widget\" data-id=\"326d82ab\">\n\tZobrazit cen\u00edk\n<\/a>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"DMS a ransomware: ochrana a obnova | Klytic","_seopress_titles_desc":"Ochrana syst\u00e9mu spr\u00e1vy dokument\u016f p\u0159ed ransomwarem a jeho obnova: omezit, co \u00fa\u010det za\u0161ifruje, izolovat z\u00e1lohu, dodr\u017eet po\u0159ad\u00ed obnovy.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"DMS a ransomware: ochrana a obnova | Klytic","_seopress_social_fb_desc":"Ochrana syst\u00e9mu spr\u00e1vy dokument\u016f p\u0159ed ransomwarem a jeho obnova: omezit, co \u00fa\u010det za\u0161ifruje, izolovat z\u00e1lohu, dodr\u017eet po\u0159ad\u00ed obnovy.","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"DMS a ransomware: ochrana a obnova | Klytic","_seopress_social_twitter_desc":"Ochrana syst\u00e9mu spr\u00e1vy dokument\u016f p\u0159ed ransomwarem a jeho obnova: omezit, co \u00fa\u010det za\u0161ifruje, izolovat z\u00e1lohu, dodr\u017eet po\u0159ad\u00ed obnovy.","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-7444","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/eu.klytic.com\/cs\/wp-json\/wp\/v2\/pages\/7444","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.klytic.com\/cs\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.klytic.com\/cs\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.klytic.com\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.klytic.com\/cs\/wp-json\/wp\/v2\/comments?post=7444"}],"version-history":[{"count":0,"href":"https:\/\/eu.klytic.com\/cs\/wp-json\/wp\/v2\/pages\/7444\/revisions"}],"wp:attachment":[{"href":"https:\/\/eu.klytic.com\/cs\/wp-json\/wp\/v2\/media?parent=7444"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}