ST Nov-Dec 2023

More documents

Recommendations

Info

Infinidat 14.qxd 01-Dec-23 10:57 AM Page 2 OPINION: OPINION: CYBER RESILIENCE KEY TAKEAWAYS FOR CYBER RESILIENCE IF YOU HAVEN'T ALREADY, MAKE SURE YOU PUT ENTERPRISE STORAGE CYBER RESILIENCE AND RECOVERY ON YOUR TO-DO LIST, ARGUES JT LEWIS, DIRECTOR OF CHANNELS EMEA AND APJ AT INFINIDAT af Pressures in the C-Suite have been rising for some time, due to escalating fears about what cybercriminals can do to threaten business operations. The 2023 Voice of the CISO report highlights this, showing that expectations of cyberattack risks among CISOs have risen to 68%, compared with 48% a year ago. Over 60% believe their organisations are insufficiently prepared to cope with a targeted attack, compared with just 50% a year ago. They are not alone in worrying about cyber vulnerabilities. CEOs also rank cyber threats as one of their top worries and recent research suggests they do not feel confident when it comes to mitigating the threat of a cyber security incident either. This was a key finding of a recent CEO study conducted by Saïd Business School at the University of Oxford. Three quarters of the leaders surveyed admitted to feeling uncomfortable making decisions about cyber threats and security. One area that is consistently overlooked when planning a cybersecurity strategy is the resilience and recovery of enterprise data storage systems. Infinidat has dedicated years of research and product development to developing a proven portfolio of technology solutions to help detect cyber attacks, and, if you do have an attack, to help in delivering near instantaneous recovery. But before investigating these solutions, every member of the C-Suite should appreciate some key facts about why ensuring storage systems are cyber resilient is so important. #1 NOT IF, BUT WHEN… Every 39 seconds, an organisation somewhere in the world suffers a cyber attack. You are right to be concerned. The question is not if your enterprise will suffer a cyber attack, but when and how often. And if penetrating the firewall is a given, this also means it's highly likely that primary and secondary data being stored by an enterprise will be compromised at some point too. #2 CYBER CRIMINALS ARE PATIENT BEASTS When cyber attackers target an enterprise, they don't immediately 14 STORAGE Nov/Dec 2023 @STMagAndAwards www.storagemagazine.co.uk MAGAZINE
Infinidat 14.qxd 01-Dec-23 10:57 AM Page 3 OPINION: OPINION: CYBER RESILIENCE "Immutable snapshots are like the vital 'secret sauce' of storage cybersecurity. They allow the end user to effectively roll back the clock and recover guaranteed, uncorrupted copies of their data, before the execution of any malware or ransomware code introduced by an attacker. Immutable snapshots ensure data integrity because they prevent data copies from being altered or deleted by anyone." pounce, but wait for a while before demanding a ransom. Sometimes they will have planned their eventual move for over 6 months. Research conducted by the Ponemon Institute verifies this, suggesting that the average number of days before a data breach is identified can be as high as 287. It means the hackers have a much greater chance of their ransomware demands being met because without the right controls in place, data stored can be fully compromised. In that timeframe, data could have been exposed to all kinds of criminal activity. #3 PREVENTION IS ALWAYS BETTER THAN CURE Data is one of the most important strategic assets for an enterprise - McKinsey has coined the phrase 'datadriven enterprise.' It describes how data is behind every decision, interaction and process. If effective cyber security is about being ready to thwart the problems that arise from a security breach, enterprises should be trying a different approach to protect their data: one that involves thinking beyond the traditional toolkits of firewalls or cyber management software and being ready with an antidote, to stop damage from spreading. TIME TO PROTECT DATA, BUT HOW? When it comes to securing an enterprise's data storage, there are some essentials to building a storage cyber defence strategy. These include ensuring the immutable nature of the data, recovered from a copy you can trust. Air-gapping to separate the management and data planes to protect the data. A secure forensic environment, to analyse the data thoroughly and ensure the fastest recovery speeds possible, is critical. Immutable snapshots are like the vital 'secret sauce' of storage cybersecurity. They allow the end user to effectively roll back the clock and recover guaranteed, uncorrupted copies of their data, before the execution of any malware or ransomware code introduced by an attacker. Immutable snapshots ensure data integrity because they prevent data copies from being altered or deleted by anyone. Even internal systems administrators are locked out of immutable snapshots manipulation. It means that the enterprise can be confident that any disruption or damage caused by the intrusion can be minimised. Logical air gapping adds a further layer of security, by separating the storage management and data planes of the immutable snapshots. There are three types of air gapping. Local air gapping keeps the data on premises, remote air gapping makes use of a remotely hosted system and hybrid air gapping combines the two. Fenced forensic environments help speed up the recovery process by providing a secure area to perform a post-attack forensic analysis of the immutable snapshots. The purpose here is to carefully curate data candidates and find a known good copy. The last thing an enterprise wants to do after an attack is to start restoring infected data that has malware or ransomware infiltrated within it. Once the forensic analysis is complete, it is safe to restore a copy to primary storage systems. The right cyber storage resilience solution is part of a "set it and forget it" process. Once the immutable snapshots, logical air gapping, fenced forensic environment and cyber attack recovery processes have been established, the whole restoration will progress like clockwork. This is all part of being an agile enterprise, one that's cyber resilient as well as cyber secure. Significantly, very few enterprise storage vendors can offer this level of cyber resiliency on both primary and secondary data. Data is an important strategic asset, critical to long term business success and yet many enterprises lack a fully integrated a cyber storage resilience program. Storage must be regarded as an essential part of effective cyber resilience, so make sure it's on your to do list! More info: www.infinidat.com www.storagemagazine.co.uk @STMagAndAwards Nov/Dec 2023 STORAGE MAGAZINE 15
Page 1 and 2: Front Cover 1.qxd 30-Nov-23 12:35 P
Page 3 and 4: ST Contents NovDec.qxd 01-Dec-23 10
Page 5 and 6: DON’T SaaSSS GET YOUR KICKED! ! T
Page 7 and 8: CAE 6.qxd 01-Dec-23 10:53 AM Page 3
Page 9 and 10: Veeam 09.qxd 01-Dec-23 10:54 AM Pag
Page 11 and 12: Quantum 10.qxd 01-Dec-23 10:55 AM P
Page 13: DCIG 12.qxd 01-Dec-23 10:56 AM Page
Page 17 and 18: Dremio 16.qxd 01-Dec-23 10:58 AM Pa
Page 19 and 20: Spectra 18.qxd 01-Dec-23 10:59 AM P
Page 21 and 22: The future is here. Tiered Backup S
Page 23 and 24: Hornetsecurity 22.qxd 01-Dec-23 11:
Page 25 and 26: Roundtable 24.qxd 01-Dec-23 11:02 A
Page 27 and 28: Roundtable 24.qxd 01-Dec-23 11:02 A
Page 29 and 30: Adsignal 28.qxd 01-Dec-23 11:05 AM
Page 31 and 32: Syniti 30.qxd 01-Dec-23 11:06 AM Pa
Page 33 and 34: 11-11 32.qxd 01-Dec-23 11:07 AM Pag
Page 35 and 36: Advancing EPYC Performance and Dens

ST Nov-Dec 2023

Create successful ePaper yourself

Delete template?

Save as template?