The recent issue at UniSuper is a reminder of how important it is to have a strong backup plan. Thankfully, UniSuper had backups with another service provider, which helped them get back on track. This situation also shows us that using multiple cloud architecture may help preventing similar problem if one of the cloud service stops working ... 🤞🏻 //“This is an isolated, ‘one-of-a-kind occurrence’ that has never before occurred with any of Google Cloud’s clients globally. This should not have happened. Google Cloud has identified the events that led to this disruption and taken measures to ensure this does not happen again.” While UniSuper normally has duplication in place in two geographies, to ensure that if one service goes down or is lost then it can be easily restored, because the fund’s cloud subscription was deleted, it caused the deletion across both geographies. UniSuper was able to eventually restore services because the fund had backups in place with another provider.// #resilience #multicloud #oneofakindoccurrence #incident https://lnkd.in/gmDK4fPt
They could have avoided this by using two accounts on the one provider. Quite easy to do on AWS, not sure on Google Cloud. This should the SOP for your backups.
Ouch.
Cyber Security Manager / Senior Penetration Tester at KPMG Australia
7moI get where you're coming from, but at some point they've risk assessed it, looked to Google for better practice and it was deemed to be within tolerances and by the sounds of it a "black swan" event occurred. If they were going to stand up a multi-cloud environment at what point do you stop? What if both vendors went down, sure it unlikely to happening but it's a possible event etc. etc. that becomes a very costly build that I imagine many boards might start to question and also members (which I am one of). By the looks of they've been able to continue delivering on core payments to retirees etc. For what it's worth I think they've been pretty good with the comms and restoring services for a black swan ... although to be fair I did joke that Google engineering run this against the environment "find . -client "unisuper" -region * -delete" :D