Sid Choudhuri’s Post

This is why you should always maintain your own backups for data. As a business you need to make sure you can function and recover from disasters.

Lesson 101 on cloud dependeny and business continuity.

Can anyone hear you scream in the Google Cloud? A company managing $135B in assets had its Google Cloud account deleted, along with all of its data, even though the company used two different zones in the Google Cloud. Fortunately, the company also had additional backups in a non-Google location and was eventually able to recover its data. Let's put all of our stuff in one vendor's cloud and hope for the best, even if you are using two different zones for data protection. I'd be interested in seeing the post-mortem on this one, which was never supposed to happen...until it did. https://rebrand.ly/p81er93 #GoogleCloud #majorfail #accountdeleted #datadelted #whodoneit #publiccloud

In case you needed reminding as to why a third-party, separated backup is critical for your public cloud workloads, this recent incident should do it. UniSuper, who has $138 billion under management, had their entire cloud account, including primary backups, deleted by Google! Fortunately they had a multi-cloud backup solution in place from which to restore, however it was nearly 2 weeks later that normal services resumed. #cloudbackup #diversify #googlefail https://lnkd.in/g7Xq48h4

Multicloud strategies for large organisations offer a range of advantages that going all in can’t. Considerations of cost competition, cross CSP data flows and technical landscape complexity are essential. However beware siren calls to build cloud agnostic…. Might as welll stay on prem as you close off opportunity to access and use many innovations that can drive customer outcomes. #architecture #cloud

Last night I learned Google wiped out an entire account for a customer. Now the experts in LinkedIn are letting me know you “don’t put all your eggs in one basket”. The value of the cloud is physical security and removing the need to manage private assets. Here’s the thing, if you need a multi cloud solution you just removed half the reason for a cloud provider. You’ve also doubled your cloud staff. You would be better off keeping things in house. The solution is finding a cloud provider that won’t break your stuff. https://lnkd.in/g-xx5NPW

If all your data is in the "CLOUD" and only in the "CLOUD" well then you are at risk.

Under DORA, BFSI firms have to build and test resilience to cyber attacks which destroy data in primary as well as secondary data centres as well as make previous backups untrustworthy. I designed a solution approach for how to do this within RTO. RPO is trickier from impact tolerance point of view. It involved standing up infra and apps in a fresh data center, validating multiple backups to choose the right backups, restoring data - all within RTO. This can be substantially automated. I am aware of offerings on the way from Scott Phillips and his ecosystem which help in part of this. As intensity and severity of attacks increase, the importance of DORA increases. Cyber resilience spans business process, apps, digital and physical infrastructure, network and is related to Business Ops, IT Ops as well as IT change. I am grateful to be working on such an important topic for the modern world. But I ask myself, why people don't use Blockchains which deliver all the above with much less hoopla. I am sure the realisation will dawn as intensity and frequency of cyber attacks increase, particularly quantum enabled ones.

Just because your data is in the cloud doesn't mean you shouldn't have your own backups. Many providers now operate on a "Shared Responsibility" model. You need to have a trusted 3rd party backup for your cloud data.

A reminder as to why cloud services need backups! Putting things in the cloud is not the same as having a backup. Google Cloud event wipes out customer account and its backups https://lnkd.in/ehFe4ehN