Delivering Modern Data Management Version History 24/05/17 – Initial presentation design

risk and compliance in modern it We are currently living through a time of heightened complexity regarding risk and compliance management Stringent regulations such as the EU’s GDPR pose challenges for how organisations collect, process and secure data as substantial fines can be imposed for non-compliance Ransomware is a very real data availability threat and Leakware has the potential to have an even bigger impact as new regulations come into force

MODERN DATA MANAGEMENT THROUGH CLASSIFICATION Classification of Personally Identifiable Information (PII) is essential for GDPR compliance To deliver the lowest TCO data needs to be classified so the appropriate level of performance, availability and security is achieved (no more, no less) Opportunity for organisations to perform a “spring clean” of their production and backup data to efficiently maximise their storage resources Store Protect CLASSIFICATION Secure Comply

POLICY BASED MANAGEMENT Once datasets have been grouped together into various classes we can look to create policies to manage all aspects of data protection, compliance and security Start by grouping together data of the same types into the minimum number of groupings – for many organisations this could be 3 main groups: BRONZE: General Data SILVER: Mission Critical Data GOLD: Regulated Data* * i.e. subject to GDPR

GENERAL DATA: EXAMPLE BRONZE POLICY Storage Protection Compliance Security All-Flash volumes for virtual & physical servers, and file shares Tier in-active data to the cloud Double disk failure protection NAS (NFS/SMB)* protocols for hypervisor connectivity Maximum 10,000 IOPS Daily storage based snapshots RPO: 24 hours RTO: Near instant Retention: 2 weeks Hourly storage based asynchronous replication (including snapshots) RPO: 1 hour RTO: <1 hour Automated DR testing, failover and failback Weekly backup to disk with off-site replication RPO: 7 days RTO: Variable Retention: 1 year Monthly backup to tape or cloud RPO: 1 month RTO: Considerable Retention: Many years Conformance Monitoring Performance, Backup & Replication Role-based access control (RBAC) For each group/tenant Anti-Malware Hypervisor, OS & NAS Log Inspection Hypervisor, OS & Storage platform Encryption of data in the cloud * Block LUNs also supported – consider using file protocols for vSphere and Hyper-V as they are typically more space efficient, easier to manage and deliver the lowest TCO

MISSION CRITICAL DATA: EXAMPLE SILVER POLICY Storage Protection Compliance Security All-Flash volumes for virtual & physical servers, and file shares Double/Triple disk failure protection NAS (NFS/SMB) protocols for hypervisor connectivity Minimum 10,000 IOPS Hourly storage based snapshots RPO: 1 hour RTO: Near instant Retention: 2 weeks Storage based synchronous replication (including snapshots) RPO: 0 RTO: Near instant Non-disruptive application mobility & DR testing, and automatic DR failover Daily backup to disk with off-site replication RPO: 1 day RTO: Variable Retention: 1 year Monthly backup to tape or cloud RPO: 1 month RTO: Considerable Retention: Many years Conformance Monitoring Performance, Backup & Replication Role-based access control (RBAC) For each group/tenant Anti-Malware Hypervisor, OS & NAS Log Inspection Hypervisor, OS & Storage platform Intrusion Prevention System (IPS) Maximise availability and speed of recovery (i.e. from a ransomware outbreak)

REGULATED DATA: EXAMPLE GOLD POLICY Storage Protection Compliance Security All-Flash volumes for virtual & physical servers, and file shares Double disk failure protection NFS/SMB hypervisor connectivity Minimum 10,000 IOPS Daily storage based snapshots RPO: 24 hours RTO: Near instant Retention: 2 weeks Hourly storage based asynchronous replication (including snapshots) RPO: 1 hour RTO: <1 hour Automated DR testing, failover and failback Daily backup to disk with off-site replication RPO: 1 day RTO: Variable Retention: 1 month Monthly backup to cloud (no tape) RPO: 1 month RTO: Considerable Retention: 3 months Conformance Monitoring Retention Locked WORM volumes Content Indexing, eDiscovery and Legal Hold Right to data access and to be forgotten For all production & backup data Case Management For coordinating regulatory requests Role-based access control (RBAC) Anti-Malware Log Inspection Intrusion Prevention System (IPS) Data Loss Prevention (DLP) Encryption of Storage Volumes and Backup data Help meet regulatory requirements such as GDPR

Netapp and commvault delivering modern data management Data Storage Data Protection Data Compliance NetApp FAS & All-Flash FAS (AFF) For unified hybrid and all-flash storage For snapshots and replication Commvault For unified eDiscovery and to help with GDPR compliance across endpoints, data centres and clouds NetApp MetroCluster For zero RPO and near zero RTO synchronous replication VMware Site Recovery Manager For disaster recovery automation NetApp Unified Manager For performance, backup and replication compliance monitoring NetApp E-Series For optimised backup to disk targets - high throughput at a low cost per TB For unified data protection (streaming and snapshot) across endpoints, data centres and clouds NetApp AltaVault For efficient storage of backup and archive data in the cloud