The Implementation of the backup strategy

The backup strategy can be your biggest defense in case of a cyber-attack. Establishing a good strategy to perform the data protection process is an essential part of an effective risk management program and even more so when our infrastructure is based on virtualized environments, with a process of constant data replication.

The design of the strategy will depend on the size of the organization and the amount of data generated by the company operation. As part of the strategy, we must consider both the process that is executed to obtain the backup and the process of restoring the data. To design an effective strategy, we must focus primarily and with a thorough evaluation of the planning, implementation, and management of testing procedures. For this we must consider primary the following:

1. The criticality of the business process and the applications that support them

2. The objectives of the organization, especially the availability requirements

3. Cost and security

4. Restrictions on hardware, personnel, space to store data, available backup media and their physical security.

 If backup services are managed by third parties, agreements must be implemented to guarantee the continuity of operations within the company in the event of an adverse event materializing. In this scenario, it is important that information systems staff should work closely with the external entity to ensure that the requirements of the company are being met as agreed.

If you like this post, you can follow me at pampaostarsagent.blogspot.com

Thanks for Sharing!

The Cybersecurity Search

I am part of a generation that has lived the evolution of technology year after year. I've been a part of every breakthrough, from the text messaging device called "beeper" to the DynaTAC 8000X mobile phone that at that time only the wealthy class could have one of these. Like many of my generation, I am passionate about everything related to technology, but I must admit that the most that captures my interest is related to security and risk events in technological resources. I spend my free time reading articles, books and / or reports on the latest incidents or events that have tested the security measures implemented by companies, through attacks perpetrated by cybercriminals.

It is interesting to evaluate each event, to look for the root cause, the security measures that the cyber-criminal broke, what security measures were implemented to mitigate the cyber-attack and compare them with the measures that I would implemented if were my case. I take more focus on the lessons learned by each event and the peculiarities of each event, since each company has its own structure. As an inveterate lover of the subject I must confess that there is not an absolute security, that there is always a risk to which our company will always be exposed. The difference lies in how prepared your staff and the company are to face an adverse event. The exposure is always there, The result of whether it affects us and how much it affects us, is determined with the measures we implement, the strategies we establish and the continuous evaluation of their progress.

                       If You like this post, you can Follow me to share more post like this with you!

Information Technology Risk Management

The need to constantly evaluate the security measures implemented in our mechanized operational processes arises from constant change in technology and the incursion of new techniques for cyber crimes that put our operation at risk. It is important to have the right equipment to carry out, these and other evaluations, which provide us with the necessary information to protect us from any adverse events.

That is why, with each update and / or integration of a new program, it is recommended that the company conduct a risk assessment. The scope of the risk analysis will depend on the needs of the company, this can be a strategic, operational, financial and / or Compliance. In the attached image, I share a general model of risk assessment:

Legislation to protect assets from cybercrime

The availability of technological resources in your company, to streamline the processes brings with it some legal responsibility, in order to protect the assets of your company. In the past years, legislation that has been deemed necessary to provide your company with tools to protect your assets from cyber criminals has been developed.

These laws and/or regulations also require your company to implement certain security measures within your business structure so that you can mitigate, respond and in the event, protect yourself from legal action by third parties in case you are a victim of the Adverse event.

The questions we must ask ourselves today:

•  Is my strategy to manage the risk associated with technological resources alienated with my current business model?
•   I’m in compliance with the regulations established in my industry?
•  How prepared am I in case an adverse event affects me?

Always expect the best, preparing for the worst.

If You like this post, you can Follow me to share more post like this with you! Have a Nice Day!