t cht lk or online backups migrating to the cloud , must always be encrypted before exiting the environment .
t cht lk or online backups migrating to the cloud , must always be encrypted before exiting the environment .
Encrypting backups adds an additional layer of security by converting sensitive information into an unreadable format , if attackers intercept data while in transit , they still couldn ’ t access it without a decryption key . Beyond transit data should also be encrypted while at rest at the secondary backup location as well .
In addition , organisations should allocate equal prioritisation to the three foundational components of effective data management :
Data protection
Actively protect both primary and secondary data backups from loss , theft , compromise , and corruption with the ability to rapidly restore data after an incident .
Dr Johannes , Dean of Research , SANS Technology Institute
Data storage
Create a well-defined security architecture that promotes the safe storage of data backups both onpremises and in the cloud .
Data compliance
Ensure all backup systems and network users continuously follow access policies that are compliant with federal and industry compliance regulations .
It is still important to understand that primary and secondary backup systems were not initially designed to defend against cybercrime , especially not from expert threat actors who leverage encrypted malware , double extortion , and phishing campaigns , among others , as core competencies of their TTP framework .
At their inception , backups were made to preserve data in cases of file corruption or accidental removals , not ransomware . However , as cyber threats targeting data assets have intensified , they have emerged as a must-have tool within the enterprise data security arsenal . By implementing effective backup practices at scale , organisations can take proactive steps to strengthen their data security posture and safeguard sensitive files . p
www . intelligentcio . com INTELLIGENTCIO AFRICA 69