So, how does a ransomware attack happen? How does it infect cloud backup systems? And how – if at all – can cloud backup offer ransomware protection? Cloud backup must haves: Configuration, immutability, point-in-time
Ransomware – the very evil that online backup is supposedly well positioned to combat, since it can restore unaffected data back into your organisation – can exploit weaknesses in cloud backup to hold the backed-up data itself to ransom.
There are a lot of free or low-cost cloud backup services out there based out of the US, for example, but you could be breaking the law – and exposing yourself to prosecution if a breach occurs – by using them.Īnd sadly, the security concerns don’t end there. This includes how physically secure the data centre itself is, whether the data held in it meets encryption standards both in transit and at rest, and indeed whether the data centre is actually based in a country whose security and data protection standards can be deemed compliant with the law in your own geography. If disaster befalls the office, it doesn’t take the backed-up data with it, because that data is offsite.īut cloud backup is not without its issues – and security is often one of them. It stores huge volumes of backed-up data in a powerful data centre elsewhere (aka the cloud). This is where cloud backup, as a concept, really comes into its own. Sixty days is the generally accepted bare minimum, but GDPR requirements and compliance regimes in highly regulated industries like finance can push this to several years or more.
0 kommentar(er)
