Henry H.’s Post

View profile for Henry H., graphic

Seasoned cybersecurity leader | OSCP | CREST CRT | CEH | CISSP | CISA | CDPSE | PCIP | AWS Security Specialty | OWASP Project Leader | Udemy Instructor | Author of the book series Securing the Unsecured

The recent issue at UniSuper is a reminder of how important it is to have a strong backup plan. Thankfully, UniSuper had backups with another service provider, which helped them get back on track. This situation also shows us that using multiple cloud architecture may help preventing similar problem if one of the cloud service stops working ... 🤞🏻 //“This is an isolated, ‘one-of-a-kind occurrence’ that has never before occurred with any of Google Cloud’s clients globally. This should not have happened. Google Cloud has identified the events that led to this disruption and taken measures to ensure this does not happen again.” While UniSuper normally has duplication in place in two geographies, to ensure that if one service goes down or is lost then it can be easily restored, because the fund’s cloud subscription was deleted, it caused the deletion across both geographies. UniSuper was able to eventually restore services because the fund had backups in place with another provider.// #resilience #multicloud #oneofakindoccurrence #incident https://lnkd.in/gmDK4fPt

Google Cloud accidentally deletes UniSuper’s online account due to ‘unprecedented misconfiguration’

Google Cloud accidentally deletes UniSuper’s online account due to ‘unprecedented misconfiguration’

theguardian.com

Thomas Spence-King

Cyber Security Manager / Senior Penetration Tester at KPMG Australia

7mo

I get where you're coming from, but at some point they've risk assessed it, looked to Google for better practice and it was deemed to be within tolerances and by the sounds of it a "black swan" event occurred. If they were going to stand up a multi-cloud environment at what point do you stop? What if both vendors went down, sure it unlikely to happening but it's a possible event etc. etc. that becomes a very costly build that I imagine many boards might start to question and also members (which I am one of). By the looks of they've been able to continue delivering on core payments to retirees etc. For what it's worth I think they've been pretty good with the comms and restoring services for a black swan ... although to be fair I did joke that Google engineering run this against the environment "find . -client "unisuper" -region * -delete" :D

Keith Marlow

Cyber Security & Architecture Consultant | PhD, CISSP, Security Risk Management, MACS, MBCS

7mo

They could have avoided this by using two accounts on the one provider. Quite easy to do on AWS, not sure on Google Cloud. This should the SOP for your backups.

Scott Evans

Transforming Finance, One Tech Tip at a Time.

7mo

Ouch.

Like
Reply
See more comments

To view or add a comment, sign in

Explore topics