About Backup Strategy and Recovery

- Whats? How it possible to lost all region infrastructure in one day?

- Yes, they placed applications infrastructure and storage backup in one DataCenter... which burned down

More and more incidents of data loss or destruction, and possibly even encryption attacks, are leading to the complete loss of critical information in companies around the world.

This simple rules, maybe save your time, your data, your customers...

Applications

1. Build region-free repository (as example for EU and US), make quorum and sync priority
2. Any product or service configuration should be in repository (include encrypted secrets)
3. Make sure - if you always can have shadow copy of your repository on cold or hot storage

Databases

1. Always use Clusters and Replicas and one more shadow replica of your replica or master
2. Make sure you have three different places with backups - local, network storage, private external cloud
3. Use full and incremental databases backup together, encrypt your backup in air (before data saved on target)

Virtualization

1. Use network software defined storages for Virtual Machines and Containers
2. Make sure you have disaster recovery functions and place where you can migrate
3. Try to build infrastructure as hot-spare and region-free

Networking

1. Make sure you have Duty Engineers with the same skills as day Engineers
2. Any major or minor network change can`t affect customers infrastructure
3. You have all historical versions of network equipment configurations

Storage

1. Use Network Software Defined Storages
2. Use Network Attach Storages
3. Always make sure you have backup drives
4. Make shadow copy of your backup storages
5. Try to build region-free storages

Security

1. Encrypt and anonymize any customer data and backup them - local, network storage, private external cloud
2. Isolate any company finance data from you main infrastructure and backup them - local, network storage, private external cloud
3. Always use way "All Denied -> Approval to Permit"

Management

1. Your engineers always know the best way to get out of an incident (Don't interfere with them, offer help and resources)
2. Always listen when your team talks about a lack of infrastructure.
3. Hire the best IT Architect

Backups

1. Make sure Duty Engineers knows how to recover service from backup
2. Build tests for recover your backup on isolated infrastructure
3. Always use way "3 copy in different locations"
4. Combine OpenSource and commercial solutions
5. Write documents how to recovery from backups