every Data Defender should know to Secure the Future

Transcript

1. Patrick Louwe Owner it2grow Patrick.louwe@it2grow.nl | www.it2grow.nl | www.vmguru.com every Data Defender should know to Secure the Future
2. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Data is the life blood of any organization! Dramatic increase in frequency and severity of cyberattacks!
3. You cannot be 100% Safe 1
4. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Do you really like your odds? Bad guys have infinite attempts to get in and only need to be right once Good guys have ONE shot to block attacks and must be right 100% of the time
5. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. CyberSecurity: Ransomware Frequency 24% 16% 23% 19% 9% 5% 1% 1% None One Two Three Four Five Six >Six How many ransomware attacks has your organization suffered in the last 12 months? (n=1,880)
6. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. 24% 76% are likely unaware of the attacks they are facing on a continuous basis encountered AT LEAST one ransomware attack Source: Data Protection Trends Report 2022 http://vee.am/DPR22 CyberSecurity: Ransomware Frequency How many ransomware attacks has your organization suffered in the last 12 months? (n=1,880)
7. Q: Thinking about the most significant ransomware attack your organization suffered in the last 12 months, how did the ransomware enter your organization’s environment? How did Ransomware enter? Source: Data Protection Trends Report 2022 http://vee.am/DPR22 (n=1,880)
8. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Cybersecurity Defense Strategy DATA Critical Sprawling Growing PROCESSES Business continuity plan • Cyber insurance • Tagging your assets Design principles • 3-2-1-1-0 Rule for backup • The principle of least privilege • Secure by design (K.I.S.S.) Patch management PEOPLE Roles Screening The Human Firewall • Cybersecurity awareness • Cybersecurity behavior Digital hygiene TECHNOLOGY Authentication Authorization Hardening Tools • Hardware • Software
9. We live in a Hybrid world 2
10. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Hybrid infrastructure 2020-2024 38% 30% 32% 29% 23% 47% 27% 25% 49% 24% 24% 52% 24% 24% 52% Physical servers within your datacenter Virtual machines on hosts within your datacenter Hosted virtual machines within a “hyperscale” or Service Provider (MSP) What do you estimate is your organization’s percentage of servers in each format currently, and what do you anticipate the percentage will be in two years’ time? 2020 2021 2022 2023 Anticipated 2024 Anticipated Source: Data Protection Trends Report 2022 https://vee.am/DPR22
11. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Hybrid Infrastructure 2020-2024 38% 30% 32% 29% 23% 47% 27% 25% 49% 24% 24% 52% 24% 24% 52% Physical servers within your datacenter Virtual machines on hosts within your datacenter Hosted virtual machines within a “hyperscale” or Service Provider (MSP) What do you estimate is your organization’s percentage of servers in each format currently, and what do you anticipate the percentage will be in two years’ time? 2020 2021 2022 2023 Anticipated 2024 Anticipated Source: Data Protection Trends Report 2022 https://vee.am/DPR22 The immediate effects of accelerated modernization due to Pandemic & Work-from-Home
12. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Hybrid Infrastructure 2020-2024 38% 30% 32% 29% 23% 47% 27% 25% 49% 24% 24% 52% 24% 24% 52% Physical servers within your datacenter Virtual machines on hosts within your datacenter Hosted virtual machines within a “hyperscale” or Service Provider (MSP) What do you estimate is your organization’s percentage of servers in each format currently, and what do you anticipate the percentage will be in two years’ time? 2020 2021 2022 2023 Anticipated 2024 Anticipated Source: Data Protection Trends Report 2022 https://vee.am/DPR22 PHYSICAL SERVERS The datacenter is not dying, just a gradual decommissioning of physical servers VS Virt/Cloud
13. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Hybrid Infrastructure 2020-2024 38% 30% 32% 29% 23% 47% 27% 25% 49% 24% 24% 52% 24% 24% 52% Physical servers within your datacenter Virtual machines on hosts within your datacenter Hosted virtual machines within a “hyperscale” or Service Provider (MSP) What do you estimate is your organization’s percentage of servers in each format currently, and what do you anticipate the percentage will be in two years’ time? 2020 2021 2022 2023 Anticipated 2024 Anticipated Source: Data Protection Trends Report 2022 https://vee.am/DPR22 VIRTUAL MACHINES Presumed to stay “flat” within modern frameworks, PlatOps, or Private Clouds.
14. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Hybrid Infrastructure 2020-2024 38% 30% 32% 29% 23% 47% 27% 25% 49% 24% 24% 52% 24% 24% 52% Physical servers within your datacenter Virtual machines on hosts within your datacenter Hosted virtual machines within a “hyperscale” or Service Provider (MSP) What do you estimate is your organization’s percentage of servers in each format currently, and what do you anticipate the percentage will be in two years’ time? 2020 2021 2022 2023 Anticipated 2024 Anticipated Source: Data Protection Trends Report 2022 https://vee.am/DPR22 CLOUD-HOSTED This is what a “Cloud First” strategy looks like – resulting in a dilution of existing Physical & Virtual machines
15. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Cloud Mobility Veeam Repository AWS Azure VCSP GCP Cloud Mobility
16. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Cloud Mobility Veeam Repository AWS Azure VCSP GCP Cloud Mobility Freedom of Choice Exit Strategy Right Cloud for the Job Migration Tooling Veeam Universal License Flexibility, your way
17. Backups are Target #1 3
18. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. DATA Report Identify Protect Detect Respond Recover CDP Replication Storage Snapshots Local Backup Offsite Backup Archive Backup RPO NIST Cybersecurity Framework + PROTECTION STRATEGY CyberSecurity Framework Alignment
19. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. No errors after automated backup testing & recoverability verification Of which is: offline air-gapped or immutable Three different copies of data Two different media One offsite copy Data management protection strategy
20. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Test Backups and DR Backups are pointless if they don't work Quarterly testing of DR and backups
21. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Trusted immutability Double-Play, Triple Play.. DAS NAS Dedupe appliance Performance Tier • Policy-based • Transparent • Space efficient • Self-sufficient • No extra costs Capacity Tier Microsoft Azure Blob Storage Amazon S3 IBM Object Storage S3-Compatible Scale-out Backup Repository™ Immutability from start to finish Hardened Repository Archive Tier Google Cloud Platform Amazon S3 Glacier Microsoft Azure Archive Blob Storage Jobs to tape, Service Provider or other Copy
22. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Backups Measures to protect your backups Modify Read Access Destroy Delete Backups Location Offline Authenticate Encryption Immutable Data Encryption Data Deletion Data Exfiltration Data Injection Insider Threat
23. More Secure is not more Resilient 4
24. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. DATA Report Identify Protect Detect Respond Recover CDP Replication Storage Snapshots Local Backup Offsite Backup Archive Backup Instant Failover Instant Recovery Secure Restore Archive Retrieval RPO RTO NIST Cybersecurity Framework + PROTECTION STRATEGY AVAILABILITY STRATEGY CyberSecurity Framework Alignment
25. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. ~95% of ALL organizations designed for backup Backup 100% Restore 3-5% PAST PRESENT Backup 100% Restore 100% Design for Recovery!
26. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Instant recovery at scale VBR Repository Compressed / deduplicated backup files Compressed NAS backup files VMs Physical servers Cloud instances File shares 1 2 3 4 Instant multi-VM recovery Instant disk recovery Instant DB recovery Instant NAS recovery
27. It is not a Firefight anymore 5
28. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Which option would you choose? Recover Fully Pay Ransom Lose Data
29. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Attackers only need to be right once! Defenders need to be right all the time! Secure Backup is your last line of Defense
30. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. Stay Safe!