Considerations For Designing Secure Backup Operations

By Author: Shirley Green
Total Articles: 129
Comment this article

Data can be lost for many reasons, including MCTS: Windows Vista hardware failure, software failure, mali-cious code (viruses, worms, and Trojans), natural disasters—such as tornadoes and floods—and theft. To prevent the total loss of data if any of these events occur, all data—from files and folders and registry keys to the Active Directory database—should be backed up. Backup operations, however, include more than inserting a tape in a drive and forgetting about it. You must ensure that the backup that is made is verified, and you must protect the backup. When preparing a design for backup operations, consider the following security issues:
Creating a good backup and transporting backup media to and from the site need to be considered. A procedure that outlines how backups are
verified, where they are stored while on site, and how they are transported should be prepared and followed.The process of returning backups to the site must also be considered. For example, many organizations specify that backups can be returned only by authorized personnel. ...
... This requirement is designed to prevent accidental or malicious restoration of old data over valid current data.
Data media Will tapes, disks, CD-ROMs, or storage area networks be used? You will need to plan security differently for some types of storage. SANs are subnet works of disks, and security must be planned for the network, disks, and the secure transport of data to the SAN across the production network or via an alter native network connection. Tapes and CD-ROMs can be secured by providing free A+ exam questions, clean, and lockable areas. Media must also be rotated and retired. Media does wear out and should be replaced as necessary to ensure good backups will be available should they be needed. Tape backup wears out quickly and is more susceptible to errors than disks. Storage, both on site and off, should be appropriate for the type of media used.
On-site storage location Is an on-site fireproof location available? The availability of such a location supports sound management practice and secures backups against damage that might be caused by fire. It does not obviate the need for off-site storage. There also need to be procedures in place that dictate the proper use of storage. A fireproof vault cannot protect its contents if it is open. It is common practice in many data centers to leave the door of the vault open, and this is a bad practice.
Off-site storage location Best practices indicate that off-site storage should also be provided, and backup media should be taken off-site on a daily basis. The location should be far enough away that the same incident, such as flooding, a chemical spill, or weather does not take out both the site of operations and the backup site. The off-site storage location can also be the location where operations can be moved if a disaster prevents the immediate resumption of activity in the data center. If the recovery site and the storage location are different, make sure there is a way to move backup media to the security+ certification recovery site.