Cloud, Kubernetes and Infrastructure Security
Storage, Database and Backup Security
We review the storage, databases and backups holding your data. We test whether your backups could be deleted even if an administrator account is compromised.
What it is
A single storage bucket left public allows data access without breaching any system. In ransomware attacks, deleting or encrypting backups is common. The review covers access, encryption and retention settings together. It also checks whether backups are immutable and kept in a separate account.
Scope
- Public access settings on storage and shared links
- Network access, authentication and encryption of managed databases
- Sharing settings of snapshots and backups
- Immutable backup locks and retention policies
- Keeping backups in a separate account or subscription
- Scope and records of restore tests
The need
When organizations need it
- When you need to know whether you can rely on your backups in a ransomware scenario.
- When you store sensitive personal data, such as health data, in the cloud. Data protection law names encryption among appropriate security measures.
- When an audit requests records of restore tests.
Method
How we work
-
Data map
We map which storage, databases and backups hold sensitive data.
-
Access and encryption
We review who can access each data store, from which network and with which key.
-
Backup resilience
Assuming an administrator account is compromised, we assess whether backups could be deleted.
-
Recovery
We compare the scope and duration of restore tests with the targets agreed by your business units.
Outcome
What you have at the end
You know where sensitive data is and who can access it. You see clearly whether your backups would be protected if an administrator account is compromised.
Frequently asked questions
Doesn't the cloud provider already back up our data?
The provider is responsible for infrastructure continuity. Backing up and restoring your data mostly depends on your own settings. Deleted or encrypted data does not restore automatically.
What is an immutable backup?
A backup that cannot be deleted or changed until a set period ends. In the right mode, not even an administrator account can delete it. Cloud providers offer this through features such as object lock and backup vault lock.
Cloud, Kubernetes and Infrastructure Security
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting