"Backup" for the protection of corporate assets
Behind a successful business is always constructed of some priceless data, that is, "Know How", "customer profile", "sales data", etc. Therefore, for these important and confidential files, business owners It is generally known that protecting these assets is a very important thing, but there are often times when information is leaked, sometimes it may be an external attack, or it may be an outflow of internal personnel, and it may even cause system paralysis. Dilemma.
Today I want to talk about "something that is very important but often overlooked", which is about "data backup".
"Our company data is backed up!"
"If there is a problem, just backup and restore it"
"There is a backup! But it's a backup from a month ago"
These seemingly prepared things, but still forget about other risks.
The Myth of Enterprise Backup
1. Only backup, no actual test
The data is backed up regularly, but there is no actual test to simulate the time and process required for restoration when an accident occurs.
It's like turning on the dash cam when driving, but when the accident happened, the important accident scene was discovered. Because the memory card was read and written too many times, it could only record images within five minutes.
So in addition to backups, actually test and simulate restores, and understandTime required for backup restore (RTO), are very important things!
If the time required for backup and restoration is 8 hours, it is necessary to assess whether the company's business can be shut down for such a long time, and whether the risk of waiting for 8 hours again if the backup and restoration fails.
2. Assessing the losses that a disaster can bear
when understandingBackup and restore time (RTO)After that, it is possible to estimate the damage caused by the impact of the company's operations and the downtime, and additional considerations must be taken at this time.The maximum amount of data loss that the company can afford (PRO), If the company is doing cross-border e-commerce, the system is interrupted at 6 am, but the backup is fixed at 12 am every day, even after the backup is restored, the order data within these 6 hours will still be lost, which meansThe maximum amount of data loss that the company can afford (PRO).
Therefore, when setting the backup interval, you must consider PRO to make a risk assessment. If every piece of data is very important, the scheme of instant synchronization backup should also be carefully evaluated.
3. NAS, external hard disk storage data
Whether it is an external hard drive or the shared data of a NAS storage company, the data is easily damaged or stolen by the hard drive, and if there are two hard drives for image backup, once the hard drive is damaged, the data is equivalent to being lost.
4. Multiple server backup, but no off-site backup
First of all, the difference between "backup" and "backup" must be distinguished:
backupRefers to the copying and storage of data, and the backup data can be restored in the event of an accident;BackupIt means that in the event of an accident, a complete set of equipment can be immediately released, so that the normal operation of the service is not interrupted, which not only protects the data in real time, but also helps the company to operate smoothly.
Although there are multiple servers as backup, if today hackers obtain the highest administrator authority, they can also perform ransom encryption on multiple servers, causing the system to be paralyzed and inoperable at the same time. Because the eggs are in the same basket, the meaning of backup is also lost. At this time, the off-site backup is very important, that is, the backup in another place, and the problem of solving this risk comes in handy. The same situation is like the occurrence of natural disasters, such as earthquakes, fires, etc. If the data are only stored in the same place, it is difficult to keep the risks dispersed.
Is there a way to restore from zero-day backup without service interruption?
The answer is yes. The "backup" just mentioned is to have another set of equipment for instant backup and to make up for it quickly when the service is interrupted, so that the system can continue to operate. In addition, other than the mainframe of the general entity, it is also possible to consider whether to use the cloud to back up, or even a cross-border computer room, taking geographical factors into account, and achieving the solution with the lowest risk.
With the development and maturity of cloud technology, more and more enterprises will choose to use cloud backup to meet the needs of off-site backup. Enterprises also do not need to use manpower to maintain and operate hardware equipment, and focus on business expansion while reducing management costs.
Qirui Technology | Guard your asset value
Qirui Technology has a professional IT team with more than 20 years, providing a full range of solutions. The application fields include government, education, finance, medical care, e-commerce, games, and technology. And imported internationally renowned public cloud services and computer room hosting, connecting private clouds and hybrid clouds, in response to the ever-changing information security problems, there are also CDN, DDoS and vulnerability scanning, dedicated to bringing you the best solution!
- The fastest network - direct access to the backbone network of major domestic telecom operators
- The most secure hosting - Iso27001 certified computer room hosting
- The most flexible payment - provide equipment buyout or annual/quarterly/monthly payment plan
- The most reliable equipment - a variety of host/network/information security/storage and spare parts are provided
- The most professional management - more than 20 years of IT management experience
other information
- RTO (Recovery Time Objective)
- The maximum amount of data loss a company can afford PRO (Recovery Point Objective)
