RANSOMWARE TRACKING MAPS

Recent problems experienced with Ransomware are evident from infections, which have occurred in 99 countries including China and Russia. The organization that was worst hit by the attack was the National Health Service in England. It was reported that there was a WannaCry programme that demanded...

Creating Your Cloud Based Backup And Data Recovery Strategy

Creating your Cloud based Backup and Data Recovery strategy

Data backups form an important part of an enterprise’s Disaster Recovery/Business Continuity planning (DR/BC). Traditionally the data was stored on tapes and physical media, at an off-site location, to mitigate the effect of the disaster. Saving the data on-site would have negated the benefit of having a backup, since there is a high probability that the backup would have been as compromised as the original. Now, the availability of cloud based backup and recovery services have created an option for enterprises to store at a virtual drive off-site, while reducing the CapEx and improving the recovery time.

The advantages of using a cloud based storage service include:

  • Reduced risks by geo-distribution of data. Now you can store your data in a geo-distributed way, cutting the regional risks significantly.

  • Economies of scale for the Managed Service Provider (MSP) who can then pass on the cost savings to you.

  • Conversion of CapEx (capital expenditures) to OpEx (Operational Expenditures). Cloud service reduces your initial capital outlay by doing away with disk buying expenditures, thereby putting lesser strain on your cash flow.

  • Data storage is scalable and elastic. Thus, if your storage requirements increases as your enterprise grows, your service can still handle the size.

  • Improved RTO (Recovery Time Objective) and RPO (Recovery Point objective). RPO and RTO are important terminologies in DR/BC planning and they respectively impact the time to restore the business function and acceptable time for which the data can be lost. A good cloud based backup and recovery plan can significantly cut both the RTO and RPO.

Here are some factors to consider before choosing the right cloud storage service.

  1. Geography of the storage: You must talk to the storage vendor to understand where your data is going to be stored. This is very important for your disaster planning. For instance, if hurricane is a major threat to your primary data storage and your backup provider has its datacenter in Florida, then it might be a good idea to consider the alternatives. Ideally the backup storage center should not be affected by the same disasters (hurricane, terrorism, earthquake, fire). You must also be aware of the regulatory limitations in certain industries (like finance, defense and healthcare) that might prevent your data from being stored in an offshore location.

  2. Public cloud vs Private Cloud: While public cloud can be a good option for small enterprises with lesser data storage needs, for a large enterprise it might not always be a good option. This is due to the need to transfer massive amounts of data over the Internet.

  3. Knowing the versioning and execution of backup: You must understand how the data is stored and versioned. In some cases, the service providers might offer only full backups instead of a more smart incremental backup solution. A full backup is both time consuming and costly in terms of managing the storage and network bandwidth consumption. If versioning is available, you must understand how the versioning works and how it can be integrated with your data management.

  4. Encryption and Information Security: The data stored in the cloud must be encrypted and you must know how the encryption keys are accessed. The service provider must also follow the industry standards to provide the best data security.

  5. Understanding the Service Level Agreements (SLA): When choosing the service provider, take time to understand their SLAs and make sure it is in line with your requirements. You must know the data availability agreement and the expected time to restore the content.

By Balaji Viswanathan

 

About CloudBuzz

Daily tech news snapshots and insights from around the world...

SYNDICATED NEWS SOURCES

(ISC)2 and Cloud Security Alliance Host Cloud Security Summit to Help Cybersecurity Pros Securely Harness Cloud Technologies

By CloudBuzz | September 22, 2017

(ISC)2 and Cloud Security Alliance Host Cloud Security Summit Research cites strengthening of cloud security skills top priority over next three years CLEARWATER, Fla. ,Sept. 22, 2017 /PRNewswire-USNewswire/ — (ISC)² today announced it’s partnering with the Cloud Security Alliance (CSA) for the CSA…

Exclusive: T-Mobile, Sprint close to agreeing deal terms – Sources

By CloudBuzz | September 22, 2017

(Reuters) – T-Mobile US Inc (TMUS.O) is close to agreeing tentative terms on a deal to merge with peer Sprint Corp (S.N), people familiar with the matter said, a major breakthrough in efforts to merge the third and fourth largest…

Hack of U.S. securities regulator rattles investors, stirs doubts

By CloudBuzz | September 21, 2017

WASHINGTON/NEW YORK (Reuters) – Wall Street’s top regulator faced questions on Thursday about its defenses against cyber criminals after admitting hackers breached its electronic database of corporate announcements and may have used it for insider trading. The incursion at the…

Leaking Cloud Databases and Servers Expose Over 1 Billion Records

By CloudBuzz | September 21, 2017

Servers Expose Over 1 Billion Records As The Wall Street Journal recently pointed out, some clients of cloud service providers such as Amazon and Microsoft are accidentally leaving their cloud databases exposed due to misconfigurations of their services. Coupled with recent headline-making…

Thales Joins the Microsoft Enterprise Cloud Alliance

By CloudBuzz | September 21, 2017

SAN JOSE, Calif., Sept. 21, 2017 /PRNewswire/ — Thales, a leader in critical information systems, cybersecurity and data security, is now a member of the Microsoft Enterprise Cloud Alliance (ECA). Designed to foster innovation and promote awareness of partner solutions, the ECA membership…

Addressing the UK NCSC’s Cloud Security Principles

By CloudBuzz | September 20, 2017

As your organization adopts more cloud services, it’s essential to get a clear picture of how sensitive data will be protected. Many authorities, from government regulators, to industry standards bodies and consortia, have provided guidance on how to evaluate cloud…