Hard to belie­ve, but the­re are other aspects of infor­ma­ti­on secu­ri­ty than NSA espio­na­ge, Russian/Chinese hacker groups and Tur­ki­sh cyber­crime acti­vists. Ever­yo­ne should still remem­ber the basic pil­lars of IT secu­ri­ty (curr­ent­ly in Ger­man “Infor­ma­ti­ons­si­cher­heit”), which focus on the pro­tec­tion goals of con­fi­den­tia­li­ty, avai­la­bi­li­ty and integrity.

Today, unfort­u­na­te­ly, dri­ven by the media, we only ever focus on IT secu­ri­ty, i.e. the pro­tec­tion of orga­niza­ti­ons and their assets against thre­ats in order to pre­vent eco­no­mic dama­ge. Today, mul­ti-pre­sent in the media: ran­som­wa­re, bot net­works, DDoS extor­ti­on, APT attacks, etc.

The­r­e­fo­re, I was plea­sed to see the recent sur­vey by Kroll Ontrack, which addres­ses the infor­ma­ti­on secu­ri­ty aspect of data pro­tec­tion / back­up. It is inte­res­t­ing to note that only 75% of the 1000 respond­ents back up regu­lar­ly. Unsur­pri­sin­gly, back­up stra­te­gies are well dis­tri­bu­ted among tape (17%), disk (50%) and cloud (33%).

Par­ti­cu­lar­ly unfort­u­na­te is the survey’s fin­ding that about 1/3 of com­pa­nies lost data, but of tho­se, most had a back­up solu­ti­on in place at the time of the data loss. Data loss amoun­ted to only small amounts of data for 67%, 1/3 of the data was lost for 13%, and about 15% had no or very litt­le suc­cess in reco­ve­ring data.

So my advice to the infor­ma­ti­on secu­ri­ty com­mu­ni­ty is:

Back­up is important
Regu­lar­ly che­cking if the back­up is working and if you have a working res­to­re pro­cess is as important as 1.
A con­tin­gen­cy plan in case of a data loss, no mat­ter if it is a disk crash, fire, light­ning dama­ge or an encryp­ting ran­som­wa­re helps to mini­mi­ze reco­very times and thus saves valuable working time

SEC4YOU sup­ports com­pa­nies in the fol­lo­wing important steps

  • Deve­lo­p­ment of sus­tainable back­up concepts
  • Ana­ly­sis of the effec­ti­ve­ness of back­up / res­to­re processes
  • Crea­ti­on of reco­very con­tin­gen­cy plan­sAu­di­ting of back­up solutions