Solutions
Works with
Pricing
Log in
Teams
Get started
Log in
Get started
Untitled
TC
by
Tayna Castro
·
2 views
·
Updated Feb 20, 2022
Share
Embed
Create your own
Chapters
00:00
Chapter 1
00:12
Chapter 2
01:30
Chapter 3
03:59
Chapter 4
04:01
Chapter 5
04:02
Chapter 6
06:01
Chapter 7
06:53
Chapter 8
06:54
Chapter 9
06:55
Chapter 10
06:57
Chapter 11
06:58
Chapter 12
11:09
Chapter 13
11:14
Chapter 14
Audio Transcript
Auto-generated
00:01 - 00:04
Hi guys, my name is Taina Silva.
00:04 - 00:10
Today I came here to present a few cybersecurity solutions for our Ceo
00:12 - 00:15
a few weeks ago he met with some
00:15 - 00:17
leaders and masks
00:18 - 00:25
and he found out that they had us, they were victims of a cyber attack and they had
00:26 - 00:29
Expenses of up to $300 million dollars and of
00:29 - 00:33
course we are trying to avoid this here estelle order
00:33 - 00:34
they
00:34 - 00:39
a strategy that they had a mask with the replication strategy and the
00:39 - 00:41
ransomware was planted by Russia even
00:41 - 00:44
though they had service in different locations
00:44 - 00:46
in the globe.
00:46 - 00:48
They one of the service war,
00:49 - 00:53
the victim of this read somewhere and it was able to quickly
00:55 - 00:58
multiply for the other service.
00:59 - 01:02
Not only malicious cyber attacks can happen
01:03 - 01:06
and of course is very expensive for the company.
01:07 - 01:11
There's also other disasters that can happen in our
01:11 - 01:14
network that we have to be concerned about.
01:14 - 01:17
For example hardware, software failures,
01:17 - 01:21
any other network disruptions even sabotaged by
01:21 - 01:24
employees and natural disasters like earthquakes,
01:24 - 01:27
fires, floods, explosions, hurricanes
01:27 - 01:30
and things that are completely out of our control.
01:32 - 01:35
To start,
01:35 - 01:42
I'm presenting to you the options of how what is the approach for our service,
01:43 - 01:45
a company as big as still other. We have service
01:46 - 01:48
in different parts of the country
01:48 - 01:50
and that's the distributed approach.
01:50 - 01:51
However,
01:51 - 01:56
it's important to understand the difference between the centralizing versus
01:56 - 02:00
distributed approach and then you guys can make the decision
02:01 - 02:04
to what's better for the company in your opinion.
02:05 - 02:10
The centralizing approach is more simple, there is only one server and
02:10 - 02:11
all
02:11 - 02:12
the networks
02:13 - 02:14
run
02:14 - 02:15
from through the server
02:17 - 02:20
but because it's only one, there is also a higher risk of bottleneck
02:21 - 02:24
in case there is an increase of traffic,
02:24 - 02:28
even a DDOS attack that was explained before, which is like when,
02:29 - 02:33
which is also a way of cyber attack when there's too many
02:35 - 02:38
uh income traffic, but it's not regular traffic
02:39 - 02:41
and then they confused the network until it
02:41 - 02:45
crashes because they cannot support infinite traffic.
02:45 - 02:48
That is probably an issue of the centralized network.
02:49 - 02:54
Also, there's only one server, so it's a lack of security because
02:54 - 02:55
if we have
02:56 - 02:59
a natural disaster in one place, that's it, our service,
02:59 - 03:03
our network style and that we don't have anywhere else to watch,
03:04 - 03:05
it is indeed more,
03:06 - 03:10
more affordable and there is less item maintenance since there's only one place
03:11 - 03:16
that they distributed approach, on the other hand, is more stable
03:17 - 03:20
and the system information is in a large number of notes,
03:20 - 03:24
there's different different servers in different places of
03:24 - 03:27
the globe and the Attackers would have to
03:27 - 03:29
focus in multiple notes at the same time
03:29 - 03:33
in order to successfully create a cyber attack,
03:33 - 03:37
which is an extra layer of protection that our company definitely needs.
03:37 - 03:40
The expression of one node.
03:40 - 03:43
For example, if one network is disconnected,
03:43 - 03:46
if one server is a victim of a malicious attack
03:46 - 03:49
or if there is a natural disaster in one place,
03:49 - 03:52
the other services, other service would be able to
03:54 - 04:01
keep up with the upcoming traffic and our network wouldn't see any issue
04:04 - 04:10
to break up all the data that we mentioned from the services from the servers.
04:11 - 04:13
There's two options backup and replication.
04:14 - 04:17
The backup is basically making a copy
04:17 - 04:21
of files of things that happened through that day and storing
04:21 - 04:25
them offsite in case anything happens and the littles are lost.
04:25 - 04:28
The goal of the backup history storage for long term
04:28 - 04:32
business records in case of an audit or something.
04:32 - 04:36
It's not something that you would need right away. That's not the goal of a backup.
04:37 - 04:41
Everything in the company should be backed up since desktop Softwares,
04:41 - 04:44
every information that is important.
04:44 - 04:45
Ah the backups,
04:45 - 04:50
they use a snapshot based technology which is very heavy
04:50 - 04:53
and drinks the server and takes a very long time.
04:53 - 04:55
And the problem is
04:55 - 04:58
there's a potential data loss for example,
04:58 - 04:59
now it's seven PM.
04:59 - 05:02
Everything that we've done throughout this day.
05:03 - 05:05
Many things were really important
05:05 - 05:07
And the backup is only going to happen at nine PM.
05:08 - 05:12
If something happens now, all that information is going to be lost.
05:13 - 05:16
And that is the problem with the backup because
05:17 - 05:23
there is this delay and with a company as big as ours, we don't have,
05:23 - 05:29
this is a liability for us to have data. Not, not, not, not
05:29 - 05:31
backed up, not safe.
05:32 - 05:37
The downtime. The cost of not having a backup of not having
05:37 - 05:38
Our data.
05:38 - 05:46
Our information savings somewhere else can range from 10,000 to 5 million for our
05:46 - 05:51
and that's why we need to train fast either in backup or replication
05:51 - 05:55
and using an automated S. A. S. System
05:55 - 05:56
which is a
05:57 - 05:59
software as a service
05:59 - 06:01
such as Salesforce.
06:03 - 06:08
The replication of the hot other hand is copying and moving data between sites.
06:08 - 06:12
It's quickie and easy to recover after the outrage.
06:12 - 06:17
So after something happened and our system is down for whatever reason,
06:17 - 06:24
quickly we can get the data and get the network back in order in a few hours,
06:24 - 06:27
which in the backup will take a few days
06:28 - 06:31
and they use the near SAN Kronos technology because
06:31 - 06:35
it's always on and replicates the data within seconds.
06:35 - 06:40
So everything that I'm doing right now is already going to be replicated and saved.
06:41 - 06:44
It is expensive to maintain because of course you pay what you
06:44 - 06:49
get for and the malicious software can indeed discredit through data,
06:49 - 06:50
which is what happened
06:51 - 06:52
with mask.
06:52 - 06:54
So that's something to consider
07:01 - 07:03
for us.
07:04 - 07:06
The goal of this meeting is to
07:06 - 07:07
find
07:08 - 07:10
and have a recovery plan.
07:10 - 07:15
We do have a very strong team here at a stale order, a very strong
07:15 - 07:17
cybersecurity team
07:17 - 07:18
and
07:18 - 07:21
those are the keys of a recovery plan.
07:22 - 07:26
We needed to determine the recovery, our facts, for example, R T O,
07:26 - 07:28
which is which is the time.
07:29 - 07:31
How much time do we need
07:31 - 07:32
after
07:32 - 07:38
out age to have our system back home? How much time can our network be down?
07:38 - 07:39
It's one server.
07:39 - 07:41
How much time can that's a wrap it down
07:41 - 07:44
because we still have another 10 service throughout the world
07:45 - 07:47
or we only have a centralized server that needs
07:47 - 07:51
to be back up and running within an hour
07:51 - 07:55
and every hour we are losing millions of dollars and the
07:55 - 08:00
age of the data from the backup devin aid for example,
08:00 - 08:02
as mentioned the backup.
08:02 - 08:05
It saves data for long term use.
08:05 - 08:10
It's like it's not something that you're going to have for an everyday situation.
08:10 - 08:12
On the other hand, the replication
08:13 - 08:14
everything is ready
08:14 - 08:15
right away.
08:16 - 08:18
And how
08:18 - 08:23
after a network a network outrage after a natural disaster.
08:24 - 08:25
How much
08:25 - 08:28
what were age of documents? How
08:29 - 08:30
late do we need
08:30 - 08:37
To go to be able to go back to our functions normally for example,
08:37 - 08:38
if something happened now,
08:38 - 08:42
are we going to be okay with having only 2,021 information
08:42 - 08:45
or we need all the way back to the 1900s.
08:47 - 08:50
Also part of the recovery plan is to know
08:50 - 08:53
how to test and update regularly our networks,
08:53 - 08:57
we have to test, we have to check for more words, any kind of viruses,
08:57 - 08:59
any suspicious activity
09:00 - 09:03
and update that with new technologies regularly.
09:03 - 09:07
We have to stay flexible because sometimes we
09:07 - 09:12
feel like the replication strategy works great.
09:12 - 09:18
But then for other things that backup would be more, it would make more sense.
09:18 - 09:21
And that's why it's necessary to stay flexible because
09:21 - 09:25
there's no one answer if it's all we have to go
09:25 - 09:29
and try and and find what's gonna be best for our company
09:29 - 09:33
management procedures because our management,
09:33 - 09:36
you guys the leadership needed to know and
09:36 - 09:38
have procedures to when there's a disaster,
09:38 - 09:39
when it's going to be
09:40 - 09:41
what things are going to happen.
09:42 - 09:47
That are gonna lead to us saying it is a disaster declaration,
09:47 - 09:51
this network is off, this is a problem. We have to take steps a.
09:51 - 09:53
B C in order to address it
09:53 - 09:58
and that it's all included in effective staff communication.
09:58 - 10:01
It's very important that management and staff are
10:01 - 10:05
all communicating and we have a safe and healthy
10:05 - 10:08
organization environment,
10:09 - 10:12
the data center locations. It's very
10:13 - 10:17
it's key to find the right locations for our data centers for our servers
10:18 - 10:19
because
10:19 - 10:22
we are thinking about natural disasters,
10:22 - 10:26
things that can happen in and out of our control, how our I. T.
10:26 - 10:28
Team can can get to this company,
10:28 - 10:33
how far it's gonna how far the center is going to be from our offices.
10:33 - 10:37
This is all very important to think and it's all part of our recovery plan
10:38 - 10:43
and it's also important and necessary to consider the cloud backup backup
10:44 - 10:46
in addition to the data centers and to having physical
10:46 - 10:50
service and physical servers in different parts of the world.
10:50 - 10:52
It's important to have data
10:53 - 10:56
in the cloud. However, because that can be accessed
10:56 - 11:00
anywhere. You just need a computer and network access
11:01 - 11:05
and we use the s a s platform which can be
11:05 - 11:09
as I measured before the Salesforce or even Microsoft office.
11:14 - 11:18
And my final thoughts because I'm not trying to make this very long,
11:18 - 11:21
I recommended the distributed approach
11:22 - 11:27
that we use the replication to save our data just because it's
11:27 - 11:33
instant and it's important to not risk a potential loss of data.
11:34 - 11:35
And also in addition today
11:36 - 11:37
many
11:37 - 11:40
that data service data service in different parts
11:40 - 11:43
of the globe is important to have the cloud
11:43 - 11:44
backup as well
11:45 - 11:46
and
11:46 - 11:47
um
11:48 - 11:50
which can summarize it always,
11:50 - 11:55
organizational awareness is important to train our employees with
11:55 - 12:00
cyber security to prevent cyberattacks to use our I.
12:00 - 12:04
T. Team that must be aligned and block any
12:05 - 12:07
websites that are not trusted
12:08 - 12:08
um
12:09 - 12:13
recommend and limited the access to only a few websites that are
12:13 - 12:18
related to what we need for our company and for our work.
12:18 - 12:23
And block email and always sends signals when there's something
12:23 - 12:28
wrong or suspicious in any computers from our network.
12:29 - 12:33
Thank you so much and I really hope that was helpful. Thank you. Bye bye.
See full transcript