1. Delivering Modern Data Management
Version History
24/05/17 – Initial presentation design

2. risk and compliance in modern it
We are currently living through a time of heightened complexity regarding risk and compliance management
Stringent regulations such as the EU’s GDPR pose challenges for how organisations collect, process and secure data as substantial fines can be imposed for non-compliance
Ransomware is a very real data availability threat and Leakware has the potential to have an even bigger impact as new regulations come into force

3. MODERN DATA MANAGEMENT THROUGH CLASSIFICATION
Classification of Personally Identifiable Information (PII) is essential for GDPR compliance
To deliver the lowest TCO data needs to be classified so the appropriate level of performance, availability and security is achieved (no more, no less)
Opportunity for organisations to perform a “spring clean” of their production and backup data to efficiently maximise their storage resources
Store
Protect
CLASSIFICATION
Secure
Comply

4. POLICY BASED MANAGEMENT
Once datasets have been grouped together into various classes we can look to create policies to manage all aspects of data protection, compliance and security
Start by grouping together data of the same types into the minimum number of groupings – for many organisations this could be 3 main groups:
BRONZE: General Data
SILVER: Mission Critical Data
GOLD: Regulated Data*
* i.e. subject to GDPR

5. GENERAL DATA: EXAMPLE BRONZE POLICY
Storage
Protection
Compliance
Security
All-Flash volumes for virtual & physical servers, and file shares
Tier in-active data to the cloud
Double disk failure protection
NAS (NFS/SMB)* protocols for hypervisor connectivity
Maximum 10,000 IOPS
Daily storage based snapshots
RPO: 24 hours RTO: Near instant Retention: 2 weeks
Hourly storage based asynchronous replication (including snapshots)
RPO: 1 hour RTO: <1 hour
Automated DR testing, failover and failback
Weekly backup to disk with off-site replication
RPO: 7 days RTO: Variable Retention: 1 year
Monthly backup to tape or cloud
RPO: 1 month RTO: Considerable Retention: Many years
Conformance Monitoring
Performance, Backup & Replication
Role-based access control (RBAC)
For each group/tenant
Anti-Malware
Hypervisor, OS & NAS
Log Inspection
Hypervisor, OS & Storage platform
Encryption of data in the cloud
* Block LUNs also supported – consider using file protocols for vSphere and Hyper-V as they are typically more space efficient, easier to manage and deliver the lowest TCO

6. MISSION CRITICAL DATA: EXAMPLE SILVER POLICY
Storage
Protection
Compliance
Security
All-Flash volumes for virtual & physical servers, and file shares
Double/Triple disk failure protection
NAS (NFS/SMB) protocols for hypervisor connectivity
Minimum 10,000 IOPS
Hourly storage based snapshots
RPO: 1 hour RTO: Near instant Retention: 2 weeks
Storage based synchronous replication (including snapshots)
RPO: 0 RTO: Near instant
Non-disruptive application mobility & DR testing, and automatic DR failover
Daily backup to disk with off-site replication
RPO: 1 day RTO: Variable Retention: 1 year
Monthly backup to tape or cloud
RPO: 1 month RTO: Considerable Retention: Many years
Conformance Monitoring
Performance, Backup & Replication
Role-based access control (RBAC)
For each group/tenant
Anti-Malware
Hypervisor, OS & NAS
Log Inspection
Hypervisor, OS & Storage platform
Intrusion Prevention System (IPS)
Maximise availability and speed of recovery (i.e. from a ransomware outbreak)

7. REGULATED DATA: EXAMPLE GOLD POLICY
Storage
Protection
Compliance
Security
All-Flash volumes for virtual & physical servers, and file shares
Double disk failure protection
NFS/SMB hypervisor connectivity
Minimum 10,000 IOPS
Daily storage based snapshots
RPO: 24 hours RTO: Near instant Retention: 2 weeks
Hourly storage based asynchronous replication (including snapshots)
RPO: 1 hour RTO: <1 hour
Automated DR testing, failover and failback
Daily backup to disk with off-site replication
RPO: 1 day RTO: Variable Retention: 1 month
Monthly backup to cloud (no tape)
RPO: 1 month RTO: Considerable Retention: 3 months
Conformance Monitoring
Retention Locked WORM volumes
Content Indexing, eDiscovery and Legal Hold
Right to data access and to be forgotten
For all production & backup data
Case Management
For coordinating regulatory requests
Role-based access control (RBAC)
Anti-Malware
Log Inspection
Intrusion Prevention System (IPS)
Data Loss Prevention (DLP)
Encryption of Storage Volumes and Backup data
Help meet regulatory requirements such as GDPR

8. Netapp and commvault delivering modern data management
Data Storage
Data Protection
Data Compliance
NetApp FAS & All-Flash FAS (AFF)
For unified hybrid and all-flash storage
For snapshots and replication
Commvault
For unified eDiscovery and to help with GDPR compliance across endpoints, data centres and clouds
NetApp MetroCluster
For zero RPO and near zero RTO synchronous replication
VMware Site Recovery Manager
For disaster recovery automation
NetApp Unified Manager
For performance, backup and replication compliance monitoring
NetApp E-Series
For optimised backup to disk targets - high throughput at a low cost per TB
For unified data protection (streaming and snapshot) across endpoints, data centres and clouds
NetApp AltaVault
For efficient storage of backup and archive data in the cloud