BACKUP IS DEAD! Restore iS born in the cloud! Robert Hedblom | sumNERV Cloud and Solution Principal Architect robertanddpm.blogspot.com robert.hedblom@sumnerv.se Steve Buchanan | Concurrency Regional Solutions Director http://www.buchatech.com/ sbuchanan@buchatech.com

Robert Hedblom Steve Buchanan @RobertandDPM @buchatech 8 Year CDM MVP 20+ years in IT, 15+ years Business Continuity 15+ years in IT Meat Dinner with Robert

Getting started The longest journey always start with the first step…

Why do you back up your data

The key starting points Why should you back up What data is important When should you back it up Who is responsible Where is the data stored Which data relates to another or other Business Services

Is all data equally important? Define your Business Services and Infrastructure Services Create different tiers Threat and risk analysis (TRA) Business Impact Analysis (BIA) Business Continuity Plan (BCP)

Teir 1 Brings great value to your company Revenue Timesaver Customer Facing Applications If this services goes down the impact will be significant for the company Customer facing applications Accounting applications ERP Any application tied to generating revenue

TIER 2 Business Services that have high use in the business High and wide use across the entire organization Impacts at an enterprise level Email (Exchange) S4B HRMS SharePoint CRM Any application the business needs day to day but is NOT tied to revenue

Research and development application Marketing application TEIR3 Business Services on a departmental level No impact on revenue or at an enterprise level Research and development application Printing application Marketing application Department specific. Not tied to revenue or does not have enterprise wide impact.

Why 2 off-site copies? April 11th 2016: An administrator wiped his entire company servers, 1500+ customers data, and all their backups. https://serverfault.com/questions/769357/recovering-from-a-rm-rf

Planning RTO and RPO Robert H

Defining downtime & data loss How could you define “Downtime”, “Data loss” and “Level of recovery”? Recovery Time Objectives (RTO) Recovery Point Objectives (RPO) Recovery Level Objectives (RLO)

Service Level Agreement “A service-level agreement (SLA) is a part of a standardized service contract where a service is formally defined. Particular aspects of the service – scope, quality, responsibilities – are agreed between the service provider and the service user. ”

Recovery means Recovery Plan Build a Business Continuity plan Sort out the Business Services and their dependencies Define and monitor your Service Level Agreements Perform continually restore-test for tier 1 Automation

DEMO Robert H

Being Ready for Cloud Steve B

Moving to Cloud Services Roadmap for adapting the cloud Spend time understand HOW and WHEN Adopt your Business Continuity Plan to your cloud roadmap Steve B

Cloud ready Business Continuity Tools Data Protection Manager Can send backup data to cloud Azure Backup Backup for on-prem directly to cloud and or IaaS protection Azure Backup Server DPM for free with Azure Backup account! Azure Site Recovery DR as a Service Hyper-V Replica On-prem to On-prem VM protection Steve B

Backup Security Steve B

Does backup security really matter? Steve B Absolutely. Yes.

Security’s role in backup When planning for protection of applications and data in your environment security should right up there in the forefront. “Backup Security” should be a key part of the plan. #1 as securing the backups #2 backups being used as an added measure for security breach mitigation Security in the context of backup can be thought of as: Steve B In regards to securing backups you want to do things like encrypt backup data as it travels offsite, encrypting backup data at rest, being able to protect encrypted data, requiring security pins or further authentication of admins and more. In regards to backup as an added measure for security backup becomes a direct part of Security planning in organizations. Sometimes when security measures fail backups are the only thing that can save you as a last resort. Backups are commonly becoming a way to recover from ransomware attacks as an alternative to paying the hackers.

How does Microsoft business continuity help Prevent Alert Recover Prevent the security risk in the first place. If an attack occurs notify right away. The ability to recover means everything. Steve B

Product Breakdown Data Protection Manager Azure Backup Encrypted backup data at rest MFA Security PIN Ransomware attacks Encrypted backup data at rest Backup data encrypted during offsite transfer Protection and recovery of shielded (Bitlocker) Hyper-V Virtual Machines Ransomware attacks Steve B Encrypted backup data at rest Once backup data is on Azure it is encrypted at rest. Microsoft does not decrypt the backup data at any point. The customer is the only one with the encryption key that can decrypt the backup data. If this key is lost not even Microsoft can decrypt your backup data. This is very secure. Security PIN With Azure Backup you can require a security pin for sensitive operations such as removing protection, deleting data, or changing other settings in Azure Backup itself such as changing a Passphrase. Azure Backup also has some other security measures in place like a minimum retention range to ensure a certain amount of backup data is always available and notifications upon critical operations to subscription admins or others as specified. MFA MFA is Multi-Factor Authentication. Microsoft has MFA available as a part of Azure Active Directory. Within Azure Backup you can configure it to require MFA of admins when performing critical operations. By enabling MFA you would then ensure via authentication from a second device usually physical to the user that they are who they say they are. Protection and recovery of encrypted computers The release of Hyper-V on Windows Server 2016 included a new feature known as Shielded virtual machines (VM’s). This feature essentially utilizes Virtual Trusted Platform Module (vTPM) technology and BitLocker to encrypt a VM to encrypt virtual machines at the virtual layer. This means if a VM is physically copied off a Hyper-V host whoever has the VM will not be able to get to the data on the virtual hard drive. With the release of DPM 2016 it supports protecting Shielded VM’s. DPM can protect Shielded VM’s regardless if they are VHD or VHDX. This is great news because as a secure organization you should want to encrypt your virtual machines and DPM can protect them. This gives you an added layer of security on top of having backups. Ransomware attacks In today’s world ransomware attacks are a common thing. These type of attacks are targeted at small, medium, and large enterprise businesses. No company is too small or too big to be put in the crosshairs of ransomware attacks. A well-known attack is Cryptolocker. As mentioned before in this blog post backups are an alternative to paying the ransom of a ransomware attack. They key here is to ensure you have a solid offsite backup in place such as Azure Backup. Having that offsite backup will ensure you can get your data back even if the ransomware attack get ahold of your onsite backup data.

DEMO Security in Azure Backup Steve B

The finish line Robert H

Sweet success… Build a Business Continuity Plan Test and validate your recovery plans Proactive monitoring, not reactive Validate your strategies Rehearse and practice Robert H

Need answers? Don’t be afraid to ask me in person! Contacts: Robert Hedblom Robert.hedblom@sumNERV.se www.sumNERV.se