{"id":10758,"date":"2023-11-14T14:04:05","date_gmt":"2023-11-14T11:04:05","guid":{"rendered":"https:\/\/oberig-it.com\/uncategorized\/designing-a-data-protection-solution-for-rapid-recovery-from-a-cyber-attack\/"},"modified":"2023-11-29T14:05:22","modified_gmt":"2023-11-29T11:05:22","slug":"designing-a-data-protection-solution-for-rapid-recovery-from-a-cyber-attack","status":"publish","type":"post","link":"https:\/\/oberig-it.com\/en\/articles\/designing-a-data-protection-solution-for-rapid-recovery-from-a-cyber-attack\/","title":{"rendered":"Designing a Data Protection Solution for Rapid Recovery From a Cyber Attack"},"content":{"rendered":"

Cyber attacks are happening at an alarming frequency. Ransom demands are exorbitant and paying the ransom does not guarantee you will regain your data. After a cyber incident, pressure is high and it is too late to devise a plan that minimizes your business impact. Therefore, it is essential to design your data protection solution for rapid recovery now, so you can confidently get your business back up and running as quickly as possible.<\/p>\n

To successfully design for recovery, we suggest the following strategy:<\/p>\n

    \n
  1. It is essential that all your business-critical data is protected appropriately and securely. This can be challenging given the typical sprawl of data across hybrid and multi-cloud environments. An enterprise solution that can provide visibility and protection for all your data is essential. A disaster recovery site alone is likely not sufficient for recovery since data is duplicated asynchronously or synchronously between sites and therefore will also be infected.<\/li>\n
  2. Identify critical business functions and their maximum tolerable downtime (MTD). All recovery methods take time. According to a Statista survey<\/span><\/a> the average duration of downtime after a ransomware attack in the first half of 2022 was 25 days. While having access to all your data seems necessary to recover immediately, this is likely not a reasonable strategy nor is it cost efficient. Instead, it is essential that you are fully aware of the priority order for recovery and the MTD for all applications so that you can architect your data protection strategy in a way that minimizes downtime for your essential businesses.<\/li>\n
  3. The type of impact varies greatly. Everything may be impacted and you will need to recover your entire data center to another location, or it may be that only some databases, VMs or files need to be recovered in place. In either case, you need a solution with flexible restore options to restore your data to any location quickly.<\/li>\n
  4. Cyber attackers also target backup data so that businesses can\u2019t recover. It is essential that you have multiple backup copies, at least one that is immutable and ideally in an isolated environment, separate from your primary and secondary backup copies. You might also consider having recovery infrastructure for your most critical applications in the same isolated recovery environment.<\/li>\n
  5. Practice, practice, practice!!! After an attack, IT is under tremendous pressure to recover. Without a properly designed plan that has been thoroughly documented and repeatedly rehearsed, costly mistakes will happen. Build in automation wherever possible to make recovery faster and more reliable while eliminating human errors.<\/li>\n<\/ol>\n

    Veritas provides a cyber resilient data protection solution essential for a robust recovery strategy. It provides:<\/p>\n