Joe Shockman’s Post

So not focussing on the recovery capabilities of google for a second, its worth noting one’s own cyber resilience and what you are doing to ensure you can be resilient and survive cyber threats. Know your threats Focus Get the right answers Identify detect protect respond and govern well #ciso #threatandrisk #infosec #advisory

Interestingly, UniSuper google cloud account ( All resources like Servers, storage, network) got deleted across different Regions (Duplication across geography as a backup if something goes wrong at one region). Luckily they had backup with another provider. As of now many organisation implement DR & backup strategy mostly with the same cloud provider like UniSuper had across regions but this could be a learning to consider truly a multi-cloud approach. https://lnkd.in/gKznbDwc

The importance of good High Availability and Disaster Recovery solutions cannot be over emphasized. Imagine if UniSuper hadn’t had their backup done by a third party. I always recommend enterprises have their backup done by third party vendors even if they are using services of cloud providers.

Oops.. underlines the importance of type of data and applications that should go on the cloud providers in addition to having diverse multi-layer backup strategies.

Lessons learned from a cloud outage: - A 3-2-1 backup strategy still makes sense, including one copy off-site for disaster recovery (eg. other cloud provider) - Include a cloud provider failure as a scenario in your enterprise (business) risk assessment - Include Cloud in your Disaster Recovery Strategy and test it periodically - Have an adequate Business Continuity Plan in place, train staff and plan periodic table-top exercises E-Solutions can help you ...

Data backup in multiple storage systems is important now a days !! As data is integral part of current world, We should have different replicas of data sets in cloud servers……………….. But question is how to bear the cost 🤔💭 #cloud #storage #data #systemdesign #analytics

Executing on the fundamentals at a consistently extraordinary level is what separates the All-Time Greats from All-Stars. It's one of the many reasons why Michael Jordan is the 🐐 It will take time for GCP to re-build trust with Customers. I'm confident they've already taken the steps to prevent this from every happening again, but Trust is paramount in these relationships. In the mean-time, this will accelerate initiatives for, at a bare minimum, to keep copies of your git & databases in a Second Cloud. It will also spur the debate on transferable infrastructure design (Kubernetes) and lessening dependency on Cloud Provider Native Services. Did you know ClearDATA customers can deploy across all 3 major cloud providers? Even if you don't have the expertise in other clouds, we help customers stand up a second or even 3rd cloud, connect them all together, and allow for exchange of Sensitive Information such as PHI across.

The move to the cloud creates new risks to resilience, with the main providers now being globally systemically important. That's not to say that in many ways, cloud based systems provide greater assurance of availablity, but if something were to go wrong at a major service provider, the potential impact could be colossal. Impacting multiple firms across various sectors, the effect on people's daily lives could be horrendous. Not being able to buy food because the supermarket system is down, or the logistics company couldn't deliver. Not being able to use debit or credit cards. Not being able to transact on a home move. Not being able to file statutory documentation. Firms being unable to pay staff. The above assumes that utilities and government services are suitably robust but if not, the impact could be significantly greater. Firms, trade bodies, regulators, governments need to act to ensure that people are protected from such failures. The firm in this case had resilience by using multiple cloud services but how common is this? I accept and agree that a significant failure is highly unlikely but it's something that should be considered whenever cloud based technology supports time critical services.

While this is clearly a technical issue, it can serve as a reminder: IT infrastructure is already a major part of the supply chain. It requires the same resilience approach that companies use for any facility or part of supply chain, or perhaps an even more complicated approach, considering the additional energy and security risks involved.

Cloud strategy is must in the era of cloud computing, you cant just rely on one cloud provider. Similar Third Party Risk Management of at least high and medium risk vendor is also crucial now a days.