Object Lock is a feature in cloud storage services (e.g., AWS S3, Azure Blob Storage) that prevents objects from being deleted or overwritten for a defined period. This WORM (Write Once, Read Many) property protects backups and audit logs from accidental or malicious deletion, even by administrators. Object Lock is a key defense against ransomware that targets backups for encryption or deletion. You can configure retention periods per object or at the bucket level. For your ISMS, Object Lock is particularly relevant for securing backup repositories and meeting retention obligations.