Hard to believe, but there are other aspects of information security than NSA espionage, Russian/Chinese hacker groups and Turkish cybercrime activists. Everyone should still remember the basic pillars of IT security (currently in German “Informationssicherheit”), which focus on the protection goals of confidentiality, availability and integrity.
Today, unfortunately, driven by the media, we only ever focus on IT security, i.e. the protection of organizations and their assets against threats in order to prevent economic damage. Today, multi-present in the media: ransomware, bot networks, DDoS extortion, APT attacks, etc.
Therefore, I was pleased to see the recent survey by Kroll Ontrack, which addresses the information security aspect of data protection / backup. It is interesting to note that only 75% of the 1000 respondents back up regularly. Unsurprisingly, backup strategies are well distributed among tape (17%), disk (50%) and cloud (33%).
Particularly unfortunate is the survey’s finding that about 1/3 of companies lost data, but of those, most had a backup solution in place at the time of the data loss. Data loss amounted to only small amounts of data for 67%, 1/3 of the data was lost for 13%, and about 15% had no or very little success in recovering data.
So my advice to the information security community is:
Backup is important
Regularly checking if the backup is working and if you have a working restore process is as important as 1.
A contingency plan in case of a data loss, no matter if it is a disk crash, fire, lightning damage or an encrypting ransomware helps to minimize recovery times and thus saves valuable working time
SEC4YOU supports companies in the following important steps
- Development of sustainable backup concepts
- Analysis of the effectiveness of backup / restore processes
- Creation of recovery contingency plansAuditing of backup solutions