Technical controls enforce write-once backup storage and replicate copies to a separate secure location
The technical facet enables write-once backup storage and replication to a separate location, the enforcement mechanism behind A.8.13's offsite protection requirement.
The immutable-backup facet makes completed backup copies write-once and replicated offsite, protecting data integrity rather than governing the cryptography A.8.24 addresses directly.