Maintaining a Shadow Tenant for Incident Response Purposes

I'm working on enhancing an incident response plan for a client who uses Microsoft 365. In the event of a serious incident, such as a ransomware attack that disrupts or locks access to the primary tenant, we are considering the feasibility of maintaining a second Microsoft 365 tenant as a 'shadow tenant' for backup and recovery purposes. This would serve as a redundancy measure to ensure business continuity. In addition, this tenant would be use to facilitate communication between our …

access attack client cybersecurity event incident incident response incident response plan locks microsoft microsoft 365 ransomware ransomware attack response response plan serious shadow working