What happens when you rely on Cloud Services - What about your (Ops)Backups?

Do you practice backup best practice? #

Relying solely on one Cloud Provider for infrastructure or backups might not be ideal as they could potentially lose all your data.

This was the case with the Danish cloud provider, "CloudNordic," when they were hit with a ransomware infection in the early hours of August 18th, as reported by The Register.
The provider refused to pay the hackers' ransom, resulting in the loss of most of their customers' data.

It should be noted that the provider denies any occurrence of a data breach, yet admits to having no knowledge of how the hack was conducted at present. These two statements do not align well.

So what is the Key Takeaway? What can we learn from this? #

Regarding Trust #

Firstly, security is not a state, but rather a process. Therefore, it is not advisable to rely on third parties for ensuring the safety and security of your operations and data.

Regarding Backups #

But much more important - implement a backup strategy that does make sense. A simple rule of thumb is the 3-2-1 Backup Strategy.

Regarding Desaster Recovery #

Backups are beneficial, but having a plan for restoring usable data after a catastrophic failure is superior. It is crucial to have a comprehensive strategy in place.

But always keep-it-simple-stupid. Overengineered, cool and fancy solutions do not help if the threshold to actually use them is too high due to their absurd complexity.