Technology Advisor Blog

Got Ransomware?  What's your Disaster Recovery Plan?

Posted by Ann Westerheim on 10/30/18 1:50 PM

Social Graphic - RansomwareDisaster recovery is a basic element of good business continuity planning. You've probably heard the phrase and like many businesses, it's something you'll get around to "later". 

Business continuity planning refers to the broad range of plans created so that a business can continue to be operational no matter what negative event might occur. Business continuity planning addresses severe, catastrophic events, loss of a key employee, director, or other principals in the organization, severe natural disasters that incapacitate a physical location, employee mistakes, and insider threats, etc. Basically anything that can go wrong!  Disaster recovery planning is one piece of this broad planning. Specifically, disaster recovery plans refer to how to quickly recover from some event that compromises your IT infrastructure.

In general, smaller businesses - which often have no IT support staff - will utilize the services of a managed service provider, like Ekaru,  to develop disaster recovery plans.
 
One piece of your disaster recovery planning needs to address how the business can protect its data from a ransomware attack. Unlike more well known viruses, ransomware doesn't just access your data, it locks it down so it is unusable. The business model behind this approach is simple: They are betting you will have no segregated backups and will be willing to buy back access to your data.  Ransomware isn't about how valuable your data is to your attacker, its about how valuable your data is to you.
 
We strongly advise multiple layers of security to protect your data.  There's no such thing as 100% security, so in addition to all the security measures you put in place, a rock solid backup is required.  Plan in advance what your Recovery Point Objective needs to be:  how much data can you lose?  15 minutes?  One hour?  One week?  The frequency of your backup matters.  Also, what is your Recovery Time Objective?  How long can you wait to get your data back?  Some backups may take a week or more to recover?  How much will that cost your business to be down for a week.  Every business has a different level of risk they can live with.  New threats mean this is a question that needs to be constantly revisited, and you may find some gaps that you can't live with.  Plan IN ADVANCE to make sure you fully understand your current risk level, your options to decrease your list, and then make a decision about your level of protection.  One of the worst phone calls we get is from the business got hit with data and it's too late to talk about protection.  You don't need a complicated plan, but don't get caught by surprise.

Topics: ransomware, cybersecurity, backup

Subscribe by Email

Most Popular Posts

Browse by Tag

See all tags...

Connect With Us

Older Blog Posts

For older Ekaru blog posts, go to ekaru.blogspot.com.