Untitled

TC
by Tayna Castro2 views·Updated Feb 20, 2022

Chapters

Audio TranscriptAuto-generated

  1. Hi guys, my name is Taina Silva.
  2. Today I came here to present a few cybersecurity solutions for our Ceo
  3. a few weeks ago he met with some
  4. leaders and masks
  5. and he found out that they had us, they were victims of a cyber attack and they had
  6. Expenses of up to $300 million dollars and of
  7. course we are trying to avoid this here estelle order
  8. they
  9. a strategy that they had a mask with the replication strategy and the
  10. ransomware was planted by Russia even
  11. though they had service in different locations
  12. in the globe.
  13. They one of the service war,
  14. the victim of this read somewhere and it was able to quickly
  15. multiply for the other service.
  16. Not only malicious cyber attacks can happen
  17. and of course is very expensive for the company.
  18. There's also other disasters that can happen in our
  19. network that we have to be concerned about.
  20. For example hardware, software failures,
  21. any other network disruptions even sabotaged by
  22. employees and natural disasters like earthquakes,
  23. fires, floods, explosions, hurricanes
  24. and things that are completely out of our control.
  25. To start,
  26. I'm presenting to you the options of how what is the approach for our service,
  27. a company as big as still other. We have service
  28. in different parts of the country
  29. and that's the distributed approach.
  30. However,
  31. it's important to understand the difference between the centralizing versus
  32. distributed approach and then you guys can make the decision
  33. to what's better for the company in your opinion.
  34. The centralizing approach is more simple, there is only one server and
  35. all
  36. the networks
  37. run
  38. from through the server
  39. but because it's only one, there is also a higher risk of bottleneck
  40. in case there is an increase of traffic,
  41. even a DDOS attack that was explained before, which is like when,
  42. which is also a way of cyber attack when there's too many
  43. uh income traffic, but it's not regular traffic
  44. and then they confused the network until it
  45. crashes because they cannot support infinite traffic.
  46. That is probably an issue of the centralized network.
  47. Also, there's only one server, so it's a lack of security because
  48. if we have
  49. a natural disaster in one place, that's it, our service,
  50. our network style and that we don't have anywhere else to watch,
  51. it is indeed more,
  52. more affordable and there is less item maintenance since there's only one place
  53. that they distributed approach, on the other hand, is more stable
  54. and the system information is in a large number of notes,
  55. there's different different servers in different places of
  56. the globe and the Attackers would have to
  57. focus in multiple notes at the same time
  58. in order to successfully create a cyber attack,
  59. which is an extra layer of protection that our company definitely needs.
  60. The expression of one node.
  61. For example, if one network is disconnected,
  62. if one server is a victim of a malicious attack
  63. or if there is a natural disaster in one place,
  64. the other services, other service would be able to
  65. keep up with the upcoming traffic and our network wouldn't see any issue
  66. to break up all the data that we mentioned from the services from the servers.
  67. There's two options backup and replication.
  68. The backup is basically making a copy
  69. of files of things that happened through that day and storing
  70. them offsite in case anything happens and the littles are lost.
  71. The goal of the backup history storage for long term
  72. business records in case of an audit or something.
  73. It's not something that you would need right away. That's not the goal of a backup.
  74. Everything in the company should be backed up since desktop Softwares,
  75. every information that is important.
  76. Ah the backups,
  77. they use a snapshot based technology which is very heavy
  78. and drinks the server and takes a very long time.
  79. And the problem is
  80. there's a potential data loss for example,
  81. now it's seven PM.
  82. Everything that we've done throughout this day.
  83. Many things were really important
  84. And the backup is only going to happen at nine PM.
  85. If something happens now, all that information is going to be lost.
  86. And that is the problem with the backup because
  87. there is this delay and with a company as big as ours, we don't have,
  88. this is a liability for us to have data. Not, not, not, not
  89. backed up, not safe.
  90. The downtime. The cost of not having a backup of not having
  91. Our data.
  92. Our information savings somewhere else can range from 10,000 to 5 million for our
  93. and that's why we need to train fast either in backup or replication
  94. and using an automated S. A. S. System
  95. which is a
  96. software as a service
  97. such as Salesforce.
  98. The replication of the hot other hand is copying and moving data between sites.
  99. It's quickie and easy to recover after the outrage.
  100. So after something happened and our system is down for whatever reason,
  101. quickly we can get the data and get the network back in order in a few hours,
  102. which in the backup will take a few days
  103. and they use the near SAN Kronos technology because
  104. it's always on and replicates the data within seconds.
  105. So everything that I'm doing right now is already going to be replicated and saved.
  106. It is expensive to maintain because of course you pay what you
  107. get for and the malicious software can indeed discredit through data,
  108. which is what happened
  109. with mask.
  110. So that's something to consider
  111. for us.
  112. The goal of this meeting is to
  113. find
  114. and have a recovery plan.
  115. We do have a very strong team here at a stale order, a very strong
  116. cybersecurity team
  117. and
  118. those are the keys of a recovery plan.
  119. We needed to determine the recovery, our facts, for example, R T O,
  120. which is which is the time.
  121. How much time do we need
  122. after
  123. out age to have our system back home? How much time can our network be down?
  124. It's one server.
  125. How much time can that's a wrap it down
  126. because we still have another 10 service throughout the world
  127. or we only have a centralized server that needs
  128. to be back up and running within an hour
  129. and every hour we are losing millions of dollars and the
  130. age of the data from the backup devin aid for example,
  131. as mentioned the backup.
  132. It saves data for long term use.
  133. It's like it's not something that you're going to have for an everyday situation.
  134. On the other hand, the replication
  135. everything is ready
  136. right away.
  137. And how
  138. after a network a network outrage after a natural disaster.
  139. How much
  140. what were age of documents? How
  141. late do we need
  142. To go to be able to go back to our functions normally for example,
  143. if something happened now,
  144. are we going to be okay with having only 2,021 information
  145. or we need all the way back to the 1900s.
  146. Also part of the recovery plan is to know
  147. how to test and update regularly our networks,
  148. we have to test, we have to check for more words, any kind of viruses,
  149. any suspicious activity
  150. and update that with new technologies regularly.
  151. We have to stay flexible because sometimes we
  152. feel like the replication strategy works great.
  153. But then for other things that backup would be more, it would make more sense.
  154. And that's why it's necessary to stay flexible because
  155. there's no one answer if it's all we have to go
  156. and try and and find what's gonna be best for our company
  157. management procedures because our management,
  158. you guys the leadership needed to know and
  159. have procedures to when there's a disaster,
  160. when it's going to be
  161. what things are going to happen.
  162. That are gonna lead to us saying it is a disaster declaration,
  163. this network is off, this is a problem. We have to take steps a.
  164. B C in order to address it
  165. and that it's all included in effective staff communication.
  166. It's very important that management and staff are
  167. all communicating and we have a safe and healthy
  168. organization environment,
  169. the data center locations. It's very
  170. it's key to find the right locations for our data centers for our servers
  171. because
  172. we are thinking about natural disasters,
  173. things that can happen in and out of our control, how our I. T.
  174. Team can can get to this company,
  175. how far it's gonna how far the center is going to be from our offices.
  176. This is all very important to think and it's all part of our recovery plan
  177. and it's also important and necessary to consider the cloud backup backup
  178. in addition to the data centers and to having physical
  179. service and physical servers in different parts of the world.
  180. It's important to have data
  181. in the cloud. However, because that can be accessed
  182. anywhere. You just need a computer and network access
  183. and we use the s a s platform which can be
  184. as I measured before the Salesforce or even Microsoft office.
  185. And my final thoughts because I'm not trying to make this very long,
  186. I recommended the distributed approach
  187. that we use the replication to save our data just because it's
  188. instant and it's important to not risk a potential loss of data.
  189. And also in addition today
  190. many
  191. that data service data service in different parts
  192. of the globe is important to have the cloud
  193. backup as well
  194. and
  195. um
  196. which can summarize it always,
  197. organizational awareness is important to train our employees with
  198. cyber security to prevent cyberattacks to use our I.
  199. T. Team that must be aligned and block any
  200. websites that are not trusted
  201. um
  202. recommend and limited the access to only a few websites that are
  203. related to what we need for our company and for our work.
  204. And block email and always sends signals when there's something
  205. wrong or suspicious in any computers from our network.
  206. Thank you so much and I really hope that was helpful. Thank you. Bye bye.