Protecting against loss.
WHAT THE PLATFORM PROVIDES
Backup services for virtual machines, databases, files and workloads Replication for disaster recovery Point-in-time restore for many services
WHAT IT DOES NOT PROVIDE AUTOMATICALLY
Protection you have not configured.
WHY THAT MATTERS
People assume cloud resources are backed up by default. Many are not.
WHAT TO ESTABLISH FOR EVERY WORKLOAD
How much data you could afford to lose How long you could afford to be unavailable
WHAT THOSE DETERMINE
Backup frequency, and recovery approach.
WHAT TO CONFIGURE
Backup policies, with retention appropriate to your obligations Protection against deletion of backups themselves
WHY THAT SECOND POINT
An attacker with sufficient access deletes backups first.
WHAT TO SEPARATE
Backup access from resource administration.
WHAT TO TEST
Restoring, on a schedule, and measuring how long it takes.
WHY
An untested backup is an assumption, and recovery time is always longer than expected.
WHAT TO DOCUMENT
The recovery procedure, stored outside the environment it recovers.
WHAT TO REVIEW
That every resource is covered by a policy.
