Speaker:

You found the backup wrap up, your go-to podcast for all things

Speaker:

backup recovery and cyber recovery.

Speaker:

In this episode, we're talking about World Backup Day, which was March 31st.

Speaker:

I know I'm a little behind on this one, but I thought it was a really

Speaker:

good episode, rerecorded and uh, just got a little behind releasing it.

Speaker:

Prasanna and I discussed some scary statistics about data loss, like how.

Speaker:

94% of companies that suffer a major data loss don't recover.

Speaker:

We also talk about the famous 3, 2, 1 rule immutable backups and

Speaker:

why backing up your SaaS data.

Speaker:

It's something that many folks actually overlook.

Speaker:

Grab a coffee or whatever and check out our belated World Backup Day episode.

Speaker:

By the way, if you don't know who I am, I'm w Curtis Preston, AKA, Mr. Backup,

Speaker:

and I've been specializing in backup and recovery for over 30 years, ever since.

Speaker:

I had to tell my boss that there were no backups of the production

Speaker:

database that we had just lost.

Speaker:

I don't want that to ever again happen to me.

Speaker:

I don't want it to happen to you.

Speaker:

That's why I do this podcast.

Speaker:

On this podcast, we turn unappreciated backup admins into Cyber Recovery Heroes.

Speaker:

This is the backup wrap up.

Speaker:

I.

Speaker:

Welcome to the show.

Speaker:

Hi, I am w Curtis Preston, AKA, Mr. Backup.

Speaker:

And with me, I have a guy that's trying to take the joy outta my most recent

Speaker:

Amazon purchase Prasanna, Molly Yodi.

Speaker:

How's it going?

Speaker:

Prasanna.

Speaker:

I am good, Curtis.

Speaker:

Now I'm trying to think.

Speaker:

Which Amazon purchase you are referring to?

Speaker:

Because I recommended something for you to purchase, and I'm

Speaker:

That

Speaker:

is more recent than what you are complaining about now.

Speaker:

I, I just received these

Speaker:

Oh, okay.

Speaker:

and

Speaker:

received quite a lot of Amazon purchases, I must say.

Speaker:

grande.

Speaker:

Are we sponsored by Amazon, by the way, or

Speaker:

We, we are not sponsored by Amazon.

Speaker:

I bought , these cool things based on a suggestion of somebody else.

Speaker:

Um, 'cause I, we we're, we're renting out now we, we have renters, we're

Speaker:

people are renting rooms in our house.

Speaker:

You know, it's, it's all the rage.

Speaker:

And, um, 'cause we're empty nesters.

Speaker:

And, uh, this person who does like YouTube videos on and, and she had

Speaker:

this thing, these little lights that, you know, they're small, they're like.

Speaker:

What is it?

Speaker:

Six inches long?

Speaker:

Yeah.

Speaker:

Um, and, and battery operated and, and motion detecting, you know, and,

Speaker:

and so you, you put 'em like in your halls and stuff and I, I bought a

Speaker:

bunch of them and you were saying you don't like where I'm gonna put 'em.

Speaker:

And you, you're taking away my joy.

Speaker:

so don't get me wrong, they're totally practical.

Speaker:

In places like closets where you're opening it, you need

Speaker:

to grab something quickly.

Speaker:

You can't see, there's no electrical there on stairs where you can't necessarily see

Speaker:

as you're approaching, but you wanna place it on a hall in a hallway where there are

Speaker:

Yes,

Speaker:

and there are light switches on either side of the hallway to turn it on and it,

Speaker:

but,

Speaker:

and

Speaker:

but not everybody wants to turn on a light just so they can go to the

Speaker:

bathroom in the middle of the night.

Speaker:

Don't you see that?

Speaker:

That is true.

Speaker:

See, you know, I'm just saying.

Speaker:

I think it's cool.

Speaker:

Anyway, I have joy and you're not gonna take away my joy.

Speaker:

Uh,

Speaker:

but wait, can we also talk about the up your previous Amazon purchase, which

Speaker:

that you recommended the The Robo Rock.

Speaker:

The Robo Rock, um, max, uh, yeah.

Speaker:

The, yeah, my new, my new Roomba replacement after Roomba, you know, my, my

Speaker:

$600 Roomba, that stopped working and then they want to charge me $300 to repair it.

Speaker:

I'm like, for $300 I can buy two Roba rocks.

Speaker:

and, and by the way, I think they're going bankrupt or about to declare

Speaker:

Yeah, Roomba.

Speaker:

Roomba is, yeah.

Speaker:

Yeah.

Speaker:

They're not doing so well.

Speaker:

and not done anything with it.

Speaker:

Yeah, that's true.

Speaker:

Yeah.

Speaker:

But I'm very happy with my new, my new, uh, I have two of them.

Speaker:

I gave them names, ups.

Speaker:

The one for upstairs is called Upsy Daisy, and the one for

Speaker:

downstairs is called Sir Clean.

Speaker:

Sir cleans a lot.

Speaker:

But, um, anyway, so, you know, we didn't do, we should have done a show.

Speaker:

This is a, this is a, I should have done a show, show.

Speaker:

We did not do a show for, you know, one of my favorite days, which is World

Speaker:

Backup Day, which is the day before April Fool's Day, because you know,

Speaker:

if you don't back up you're a fool.

Speaker:

but, and the funny thing is, I don't think you even remembered it was backup day

Speaker:

I didn't.

Speaker:

I've been very, I've been very busy.

Speaker:

I called you and was like, happy world backup day.

Speaker:

And you're like, wait, what?

Speaker:

What you said.

Speaker:

No, you said something like, happy favorite day or something.

Speaker:

yeah.

Speaker:

You said something.

Speaker:

I was like,

Speaker:

your third favorite day.

Speaker:

I think your first favorite day is your birthday.

Speaker:

The second favorite day is Christmas, and this is your third.

Speaker:

yeah.

Speaker:

And I was like, what in the hell are you talking about?

Speaker:

But I thought what we would do is, uh, just take a look at some

Speaker:

of the coverage that people did.

Speaker:

You know, sometimes people have some interesting insights.

Speaker:

Uh, around World backup Day, and obviously it's one of my favorite talk topics.

Speaker:

So I thought we'd take a look at some of the coverage and, and see if we can, you

Speaker:

know, deduce anything interesting from the stories and, uh, we'll, we'll include

Speaker:

links to all the stories that we're gonna, that we're gonna talk about in there.

Speaker:

The first story is from Sophia Barnett over at otbi, uh, object first.com.

Speaker:

And so, OT, what?

Speaker:

I think they're technically the company name is Object First.

Speaker:

Okay.

Speaker:

Yeah.

Speaker:

The company name is Optic First, right?

Speaker:

But it's, UBI is the product

Speaker:

I

Speaker:

which stands for Out of the Box Immutability.

Speaker:

So they're a storage product specifically targeted at, uh, a Veeam.

Speaker:

Um, I, I think their principles would work.

Speaker:

Go ahead.

Speaker:

Yeah.

Speaker:

And it was actually started by the co-founders of Veeam.

Speaker:

Wait, it's Rap Mirror, right?

Speaker:

Yeah.

Speaker:

And others, et et all.

Speaker:

Um, it, it's, it's funny, the first thing I find amusing is that they.

Speaker:

They liken backups to brushing and flossing, flossing your teeth,

Speaker:

something else that no one likes to do, uh, especially the flossing part.

Speaker:

But they, they've got some interesting statistics that they quote.

Speaker:

I'm gonna, I'm gonna put a link to the article that they quote from a lot.

Speaker:

But, um, there's a, another article from, um, a company that.

Speaker:

Uh, did a bunch of, you know, data loss statistics from 2024, and it

Speaker:

obviously, we, we've heard this before, 94% of companies that suffer

Speaker:

a major data loss do not recover.

Speaker:

That is a scary statistic.

Speaker:

Oh

Speaker:

heard that before though, right?

Speaker:

And in fact, we did the series on cloud disasters, right.

Speaker:

That basically ruined companies, shut them down.

Speaker:

Cause significant business impact, right?

Speaker:

So yeah, it's definitely one thing you do not want to mess around with.

Speaker:

Yeah.

Speaker:

Yeah.

Speaker:

And the, so they've got the 94% that suffer a major data loss do not recover.

Speaker:

That is really scary.

Speaker:

They've also got that half of the companies that have any kind of data

Speaker:

loss, they close within two years.

Speaker:

So it's like they, they, they, they don't close right away, but they end up, um,

Speaker:

and 43% never reopen after shutting down.

Speaker:

Uh, that's, it's pretty scary Statistics.

Speaker:

no, that's definitely scary and I don't.

Speaker:

Think people really internalize that number, right?

Speaker:

Because you don't always hear, it's kind of like you like startups, right?

Speaker:

You always hear about the companies that went big on IPOs, but you

Speaker:

never really hear about all the companies that went bust.

Speaker:

Which are most of them

Speaker:

exactly.

Speaker:

And it kind of feels the same way here.

Speaker:

Like you don't, you only hear a couple about like companies

Speaker:

that have recovered, but not

Speaker:

right?

Speaker:

the companies that went bust.

Speaker:

And I think the other stat from this article that was interesting

Speaker:

is for small businesses, 70% close within a year of a large data loss.

Speaker:

Yeah, yeah.

Speaker:

Yeah.

Speaker:

That's scary.

Speaker:

One thing I do like in this article is they talk about world Backup Day pledge.

Speaker:

I dunno if you saw that,

Speaker:

Yeah.

Speaker:

Yeah.

Speaker:

says, I solemnly swear to back up my important documents and precious memories

Speaker:

on March 31st, hashtag World Backup Day.

Speaker:

Yeah.

Speaker:

in tiny quotes, it says, I will also tell my friends and

Speaker:

family about world backup Day.

Speaker:

Real friends.

Speaker:

Don't let friends go without a backup.

Speaker:

Smiley face.

Speaker:

I like that.

Speaker:

You know, you know, one of the things that's happened to me multiple times in my

Speaker:

life is because people know I know backup.

Speaker:

They often come to me when they have that moment of like, I just did this

Speaker:

thing and I think I've lost all my data.

Speaker:

Can you help me?

Speaker:

And I'm like, well, what's your backup plan?

Speaker:

And they're like, I don't have a backup plan.

Speaker:

I'm like, well, I can help you best if I have a time machine.

Speaker:

Right.

Speaker:

You know, like, it, it, it, it hurts me when I see, when I see data loss

Speaker:

happening, especially if it's like.

Speaker:

You know, data that somebody thinks is really important

Speaker:

to them personally, right?

Speaker:

Um, yeah, I could, I can think one of the worst ones I remember, I remember it was,

Speaker:

it was a niece, niece of mine that came to me and she was like, help me, uncle

Speaker:

Curtis, like, help me with this thing.

Speaker:

Luckily with that one, I. I think we were able it, like it was a drive

Speaker:

that was dying and we were able to duplicate the drive before it fully died.

Speaker:

But, um, yeah.

Speaker:

Um, there's another interesting stat here about, um, that the average

Speaker:

annual cost of a data breach.

Speaker:

Now this isn't quite, basically, you know, reason why we're talking

Speaker:

about data breaches is data breaches often result in ransomware.

Speaker:

Ransomware often results in, you know, needing backup and often

Speaker:

results in killing backups.

Speaker:

Right?

Speaker:

Um, $9.36 million of the average cost of a, of a breach that is a.

Speaker:

us Yeah.

Speaker:

And that's quite a lot of money, right?

Speaker:

Just if you think about, and.

Speaker:

know when we think from a backup perspective, we're like, oh, it's just

Speaker:

the same as restoring data, right?

Speaker:

Recovering systems, right?

Speaker:

And yes, you are doing more systems, but that's all you're doing.

Speaker:

But if you go back and listen to some of our podcast episodes when

Speaker:

we had Mike Sailor on, It's not just about recovering the data, right?

Speaker:

You don't even know what systems are good, what systems are

Speaker:

bad, what backups even use.

Speaker:

Maybe you need to collect forensics data because you don't know what

Speaker:

data has been Maybe exfiltrated.

Speaker:

And all of those things take time and time costs money, both from a people

Speaker:

and resource perspective, and also your business may be down for however long

Speaker:

it takes you to actually do all of this.

Speaker:

Yeah, absolutely.

Speaker:

And now we're gonna take a look at a Forbes article from Tom Coughlin, somebody

Speaker:

I know well, um, you know, he, he covers the space quite a bit and he wrote a,

Speaker:

he wrote a pretty good article where he, you know, he, he gets some insights from.

Speaker:

You know, random people around the, the internet.

Speaker:

I, I think, um, or random people that are interested in this topic.

Speaker:

The, the first quote that sticks out to me from Richard Copeland, the CEO of Lease

Speaker:

Web, uh, you know, he was saying that if you have no backup, no safety net.

Speaker:

What you have coming ahead of you is downtime, financial

Speaker:

hemorrhaging, and a lot of regret.

Speaker:

Yeah.

Speaker:

just thought that was kind of funny.

Speaker:

Um, any, anything that stuck out for you?

Speaker:

Uh, so I know that, uh, Laura, or I know that Lance O'Hara talks

Speaker:

Uhhuh?

Speaker:

sort of 3, 2, 1 rule for data storage, which is if you've ever

Speaker:

listened to this podcast, right.

Speaker:

We always talk about it.

Speaker:

But

Speaker:

Right.

Speaker:

but One interesting thing that the article says though, is for consumers, right?

Speaker:

Your original data on your laptop is one copy.

Speaker:

A

Speaker:

Right.

Speaker:

device is a second copy, and a cloud copy is your third copy, right?

Speaker:

And that's how you make sure that you have.

Speaker:

Uh, three copies of your data, right on

Speaker:

Yep.

Speaker:

media, one of which is offsite.

Speaker:

And so that is something that I think as consumers, sometimes we don't follow.

Speaker:

In fact, I would say even some backup folks who work in the industry

Speaker:

for their own personal stuff may

Speaker:

Yeah, including me.

Speaker:

Including me.

Speaker:

I, I mean, that's one way I, I would, you know, because you, you

Speaker:

technically, that's a 3, 3, 1, right?

Speaker:

Because you, you, you want to have it on two different types of media.

Speaker:

Uh, you know, two different storage mechanisms, however you wanna put it.

Speaker:

In this case, it's both this, so it's not, it's technically the same media, but,

Speaker:

but it, it's a different system, right?

Speaker:

Um, if you have it on your laptop and on your cloud, I think that, you

Speaker:

know, in a backup cloud provider, I think that that satisfies 3, 2, 1.

Speaker:

What he's describing, I think is a 3, 3, 1.

Speaker:

You have it on three different types of media.

Speaker:

Um, I don't have a problem with what he's suggesting.

Speaker:

I'm just saying I don't think you're doing anything wrong if you're using a

Speaker:

The

Speaker:

direct to cloud backup.

Speaker:

Yeah.

Speaker:

Yeah.

Speaker:

you decide

Speaker:

Um,

Speaker:

2, 5, that's totally fine.

Speaker:

well, I don't think it's not possible to have one.

Speaker:

Yeah, okay.

Speaker:

You could have 3, 2, 5.

Speaker:

Yeah.

Speaker:

Yeah.

Speaker:

Uh, um, and the, the, he was, uh, that, that guy was from sea, uh, Seagate.

Speaker:

Yes.

Speaker:

Um, um, the, uh, let's see.

Speaker:

Lemme skip over the catalog logic guy.

Speaker:

Um.

Speaker:

Uh, Veeam.

Speaker:

Veeam had some comments in the article where they talked about,

Speaker:

you know, recommending more than just cloud storage again.

Speaker:

Interesting.

Speaker:

Uh, again, I don't have a problem with that.

Speaker:

If you have a product like Veeam that can help automate having an onsite

Speaker:

copy and an offsite copy, um, then that is absolutely the way to go.

Speaker:

Right.

Speaker:

Um, and the.

Speaker:

Uh, uh, my challenge was if we're talking about consumers, that's

Speaker:

typically not something that's gonna be available to them, but,

Speaker:

Yeah.

Speaker:

but from a, you know, enterprise standpoint, having a product like Veeam

Speaker:

that can create an on on-site copy and an offsite copy, um, you know,

Speaker:

in, in the cloud is a good thing.

Speaker:

Yeah.

Speaker:

Of course, if we didn't talk about your favorite subject, Curtis,

Speaker:

Mm-hmm.

Speaker:

think that we could consider this world backup day.

Speaker:

Right?

Speaker:

But

Speaker:

I'm curious what, what you think my favorite subject is, but go ahead.

Speaker:

Uh, so we do have a couple quotes from, people in the tape industry.

Speaker:

Ah, yeah.

Speaker:

Who, uh, mentioned sort of okay, why the importance of tape.

Speaker:

And also if you listen to one of our pre previous episodes,

Speaker:

we talked about air gaps, right?

Speaker:

Yep.

Speaker:

is actually one of the things that, uh, is, uh, called out by Rich

Speaker:

Gadomski from the Active Archive

Speaker:

Of course.

Speaker:

Rich.

Speaker:

Rich and Mitch.

Speaker:

Rich and Mitch from, uh, spectra Logic.

Speaker:

Yeah.

Speaker:

And then Bob Fine over at Quantum.

Speaker:

Right.

Speaker:

Just talking about sort of air gap storage systems.

Speaker:

Right.

Speaker:

And using it for keeping secure copies of their data, especially in

Speaker:

different Geo Geographic locations.

Speaker:

So we're gonna do, we're gonna do a 3, 4, 1, or the three?

Speaker:

The four.

Speaker:

The four.

Speaker:

So we're gonna have a copy on, on, you know, our primary copy.

Speaker:

We're gonna make copy on disc, a copy on tape, and a copy in the cloud.

Speaker:

Yep.

Speaker:

That's four.

Speaker:

It's four.

Speaker:

Four four.

Speaker:

Yep.

Speaker:

Um, yeah.

Speaker:

a question.

Speaker:

Yeah.

Speaker:

We never really know what the cloud is doing, so is it technically

Speaker:

considered a different media?

Speaker:

Well, it's, again, it's, it's, it's, the question is, it's a different risk profile

Speaker:

is basically what the idea is, right?

Speaker:

You, the idea is that you're not.

Speaker:

I.

Speaker:

You're not storing if, if, if you, if you're clearly storing something on

Speaker:

exactly the same hardware and exactly the same storage, like for example, this all

Speaker:

started with the digital camera, right?

Speaker:

Yeah.

Speaker:

If you just put the, if you put the, I, I had a digital camera

Speaker:

that would automatically twin.

Speaker:

Every time it wrote something, it would write it on two different SD cards.

Speaker:

Yep.

Speaker:

That's.

Speaker:

Two different things with exactly the same risk profile.

Speaker:

That's what he's trying to talk, you know, given that this all started

Speaker:

By,

Speaker:

the digital back or digital photography world.

Speaker:

the way, if people aren't aware, we did an episode actually.

Speaker:

With the person who coined the 3, 2, 1 rule.

Speaker:

Yeah, yeah, we did, we interviewed that and, uh, I gotta see if I can

Speaker:

find that and put that in as a comment.

Speaker:

Yeah.

Speaker:

That was a, was a fascinating, you know, and, and I wonder, I, I still

Speaker:

like, wonder what it's like to.

Speaker:

Know that you coined something back so long ago, I think it was the nineties.

Speaker:

And then to see, to see, to see how common it's become in, in backup design.

Speaker:

I am sorry

Speaker:

I like that.

Speaker:

CDP still has not near synchronous, I think, what do you call it?

Speaker:

Near CDP, near CDP, the term I coined,

Speaker:

Yes.

Speaker:

not, certainly not to the degree that, uh, that 3, 2, 1 rule.

Speaker:

Um, so.

Speaker:

else in this article that you thought was interesting?

Speaker:

Uh, let's see.

Speaker:

Well, so Molly, uh, Molly Presley, uh, somebody I know well from Hammer Space,

Speaker:

uh, she talked about, um, you know, again, the need for automated, right.

Speaker:

Automated data protection, and I could not agree more.

Speaker:

Right?

Speaker:

And we alluded to that with the Veeam discussion where, you know,

Speaker:

all of this needs to be automated.

Speaker:

The more you have the human.

Speaker:

Uh, involved in things, the worst things are gonna be right.

Speaker:

And so, yeah.

Speaker:

Uh, a agreed.

Speaker:

will take over everything, Curtis.

Speaker:

And then what are we gonna do?

Speaker:

Um, yeah, that's a great question.

Speaker:

The robots can take over my house cleaning.

Speaker:

Have you never seen Battlestar Galactica?

Speaker:

I, I've seen both of the Battlestar Gala galas.

Speaker:

Thank you very much.

Speaker:

The next we have is an article from Kevin Perot.

Speaker:

It's a French last name.

Speaker:

I don't know.

Speaker:

Sorry

Speaker:

apologize.

Speaker:

I, yeah.

Speaker:

Kevin French, last name.

Speaker:

Um, and one of the first thing you know, he, he talked about how

Speaker:

he felt there was this growing awareness of backup, which is good.

Speaker:

There was a survey from Western Digital that said that, uh, 87% of

Speaker:

people reported backing up their consumers reported backing up their

Speaker:

data automatically or manually.

Speaker:

is

Speaker:

an in what?

Speaker:

Is that it?

Speaker:

Does that surprise you?

Speaker:

That's, yeah, that is super I would not

Speaker:

That's what I thought too.

Speaker:

that

Speaker:

Yeah.

Speaker:

be at that level unless I do wonder if they are considering

Speaker:

things like Google Drive syncing, like Google One or using Apple

Speaker:

Uh.

Speaker:

Yeah.

Speaker:

iCloud.

Speaker:

Yeah.

Speaker:

I backup my phone.

Speaker:

I use iCloud.

Speaker:

Yeah.

Speaker:

Which, you know, we have an episode on why iCloud is not backup.

Speaker:

It's it's synchronization.

Speaker:

It's not backup.

Speaker:

Uh, delete your files on your, you know, what, what the most common, the way that

Speaker:

people find out that it's, that it's.

Speaker:

A synchronization, not backup, is that they, they get a new phone

Speaker:

and then they decide to delete all the pictures on their old phone.

Speaker:

Instead of just wiping the phone.

Speaker:

They actually go in and delete all their pictures before they disconnect

Speaker:

it from their iCloud account and they end up deleting all the

Speaker:

pictures in their iCloud account.

Speaker:

And, and in fact, one of the interesting things from that, right, is the top

Speaker:

reasons for backing it up, losing files,

Speaker:

Yeah.

Speaker:

up space on their device and to protect against cyber threats.

Speaker:

But the first two are significantly higher than the last one.

Speaker:

Percentage wise.

Speaker:

Yeah, that is weird, right?

Speaker:

Only 42% to protect against cyber threats.

Speaker:

And by the way, I don't, I don't like this idea that backup is for

Speaker:

freeing up space on your device, but that's, that's just because, yeah.

Speaker:

So you were going the same place.

Speaker:

Yeah,

Speaker:

I mean, I understand it's being pedantic, but backup is not for

Speaker:

freeing up space on your device.

Speaker:

That's what archiving is for.

Speaker:

But I understand that the average person doesn't know the

Speaker:

difference between the two, but.

Speaker:

come on, as Western Digital, you should know the difference,

Speaker:

you know?

Speaker:

So then they go into obviously the, you know, double extortion, uh, the, the

Speaker:

title of this particular article is Why backup is not Enough, and Because why does

Speaker:

backup not help with double extortion?

Speaker:

Curtis, what is double extortion?

Speaker:

Well, I was gonna let you, I was gonna let you define it.

Speaker:

you define it.

Speaker:

Okay.

Speaker:

So the idea.

Speaker:

Good after you.

Speaker:

Uh, so basically double extortion is where, you know, they've stolen your

Speaker:

data and there's a traditional extortion where you're gonna encrypt all the data

Speaker:

and, um, you can have it, you can have it de-encrypted if you pay the ransom.

Speaker:

Double extortion is where they steal the data.

Speaker:

And, um, and then they will say.

Speaker:

We're either going to, um, we're going to publish.

Speaker:

The general thing is that they're going to publish the data, basically

Speaker:

releasing your, your trade secrets or perhaps stuff that's embarrassing to you.

Speaker:

Um, and that, that's why it's called double extortion

Speaker:

The

Speaker:

and, yeah.

Speaker:

common example,

Speaker:

Yeah.

Speaker:

example of double extortion where they stole a bunch of sensitive emails

Speaker:

and threatened to publish 'em, and I think they ended up publishing them

Speaker:

They did.

Speaker:

And, you know, and, and a lot of actors were upset over how the, the studio talked

Speaker:

about them behind the, behind their back.

Speaker:

But you know what, uh, the studio recovered anyway.

Speaker:

Um, but what, so why doesn't backup help with that?

Speaker:

Yeah, because you can't prevent the second

Speaker:

Yeah.

Speaker:

of that double extortion scheme.

Speaker:

You know, like

Speaker:

Yep.

Speaker:

gonna help you prevent data from being taken out of your company.

Speaker:

I. Right.

Speaker:

They, you need to use like, uh, endpoint detection, response solution, EDR or

Speaker:

other things in order to prevent data from leaking or leaving your environment.

Speaker:

Backups aren't gonna help you with that.

Speaker:

Yep, yep.

Speaker:

It's um, yep.

Speaker:

And, and just since there's now double extortion, or we just talked about

Speaker:

double extortion, have you heard about this triple extortion thing?

Speaker:

What?

Speaker:

No, no, I haven't.

Speaker:

What?

Speaker:

What?

Speaker:

What is triple extortion?

Speaker:

you pay, the bad

Speaker:

Uhhuh?

Speaker:

still leave the hooks in place other, and then they sell access to other people

Speaker:

Ugh.

Speaker:

use that same access to get into your systems again.

Speaker:

No bueno.

Speaker:

Yeah.

Speaker:

What I liked best about this particular article is that they have a seven step

Speaker:

roadmap for data resilience, which I was actually pretty impressed with.

Speaker:

A lot of these just leave this stuff out.

Speaker:

The first thing they talk about is assessing risk, right?

Speaker:

You know, figure out what you have, assess the risk.

Speaker:

Then you need a plan that involves an RTO and an RPO.

Speaker:

I like that, right?

Speaker:

Encompasses on-premises and cloud assets.

Speaker:

Uh, and then number three, immutable storage.

Speaker:

I like that.

Speaker:

Right?

Speaker:

Uh, and then we have, um, you know, the, the, and also secure on-premises storage.

Speaker:

So I love that they got the cloud, they got the on-premises

Speaker:

storage, uh, you know, and then continually evaluating your backup

Speaker:

infrastructure against best practices.

Speaker:

You have a security culture that is definitely important, right?

Speaker:

Uh, and then also make sure your third party data is also backed up.

Speaker:

That's a number.

Speaker:

That's one that so many companies leave out, right?

Speaker:

The

Speaker:

Um,

Speaker:

thing I, I like the list.

Speaker:

The only thing I would add is a zero step zero,

Speaker:

mm-hmm.

Speaker:

is work with the business to understand what is important for your company.

Speaker:

I, I thought the same thing.

Speaker:

Uh, when I, when I read two, like, it, it, it just sort of assumes

Speaker:

that you have an RTO and an RPO.

Speaker:

It doesn't, doesn't say, you know, make sure you get, make sure you work with the

Speaker:

business to get an RTO and an RPO, uh, because you, you can't do, uh, backup and

Speaker:

recovery in, in a, in a vacuum, right?

Speaker:

Um, and, um,

Speaker:

this was a

Speaker:

yeah.

Speaker:

article and

Speaker:

Yep.

Speaker:

good points that people should be following when it comes to

Speaker:

Yep.

Speaker:

I saw a lot of common threads in there.

Speaker:

You know, we saw our, we, we saw a lot of our favorite topics come up, right?

Speaker:

One of which is the 3, 2, 1 rule and the big thing, I think the, the number one.

Speaker:

Sort of use for that today, I think is against the idea that your SaaS

Speaker:

provider is backing up your data.

Speaker:

Because even if they are, it's like backing up your hard drive

Speaker:

to your hard drive, right?

Speaker:

Um, and so the 3, 2, 1 rule, it's like if, if you're, if you don't

Speaker:

have a copy of your data outside.

Speaker:

Of the infrastructure that's being used to produce the, you know, it

Speaker:

violates, it's not any of the thing.

Speaker:

It might be the three, right?

Speaker:

In fact, many people don't even have the three many people like

Speaker:

again, to pick on my favorite.

Speaker:

Uh, provider, Microsoft, many people are using Microsoft 365

Speaker:

and they're not backing it up.

Speaker:

And they're like, oh, well I have the recycle bin, you know, or

Speaker:

I have the, whatever, you know, I have the retention period.

Speaker:

You know, and it's like, yeah, but it's not, it's not even a three, it's one copy.

Speaker:

It's one table in a database, right?

Speaker:

Which might be okay for their particular use case, but it is not

Speaker:

gonna cover all use cases that you think about when it comes to backup.

Speaker:

It is not gonna cover like a ransomware attack or, you know, or, or like some of

Speaker:

the stuff we've covered where a company accidentally deletes their entire account.

Speaker:

Yeah.

Speaker:

Right.

Speaker:

Um,

Speaker:

thing we have not really talked about

Speaker:

in this, what,

Speaker:

is immutable storage.

Speaker:

what, no, it came up, it came up in the.

Speaker:

ubi barely though, right?

Speaker:

We didn't really cover like the

Speaker:

Yeah.

Speaker:

Why?

Speaker:

Why do we talk about immutable storage so much here?

Speaker:

Well, because as we've talked about in various, uh, ransomware scenarios, right,

Speaker:

the bad actors are getting smarter, and the first thing that they're attacking

Speaker:

now is your backup infrastructure.

Speaker:

Yeah.

Speaker:

in, they find it, it has all the data they need so they can figure

Speaker:

out what's important, exfiltrate the data, and then they blow away all

Speaker:

your backups so you can't recover.

Speaker:

So you then have to pay the ransom in order to get your infrastructure back.

Speaker:

Exactly, and, and you know, with the folks at, uh, I mean, they're not the only one,

Speaker:

but they, but they're definitely going directly after this particular problem.

Speaker:

They're like, we're gonna make sure that at least one copy of your data.

Speaker:

Is 100% immutable because most of the other, many of the other

Speaker:

immutable options, as I make air quotes, they're not really immutable.

Speaker:

And by the way, we had, we had a whole episode about that recently, right?

Speaker:

Where we talked about the different things that people mean when they say immutable.

Speaker:

Um, but this is, you know, actual immutability, right?

Speaker:

Um, even if you have the super user privileges, you're not

Speaker:

able to get rid of the data.

Speaker:

Um, so yeah, immutable storage is, is absolutely.

Speaker:

Uh, crucial.

Speaker:

So is a cloud copy.

Speaker:

I think even if you have on premises backup infrastructure, if it's possible

Speaker:

for you to have a cloud copy of your data, I think that a, again, an immutable cloud

Speaker:

copy of your data, my favorite way to do that would be to put it on an actual

Speaker:

immutable, a truly immutable product like object lock with the compliance mode.

Speaker:

Right.

Speaker:

Um, so that you, so it's truly immutable.

Speaker:

So here's a question for you.

Speaker:

Yeah.

Speaker:

Immutable cloud copy storage versus tape,

Speaker:

what would you pick?

Speaker:

Or

Speaker:

Well,

Speaker:

would you, how would a customer or a backup admin decide what to pick?

Speaker:

Because we talk about tape a lot, we talk about cloud storage a lot.

Speaker:

Tape does offer immutable copies.

Speaker:

Yeah.

Speaker:

Right?

Speaker:

But between these,

Speaker:

And it's enforced in the hardware, right?

Speaker:

If it's, if it's immutable flag, you can't, you can't overwrite that.

Speaker:

So between these two,

Speaker:

Yeah.

Speaker:

Like how would a backup person decide which one to use?

Speaker:

Yeah, that's a great question.

Speaker:

Um, so the question would be as to whether, which one is

Speaker:

able to meet your requirements?

Speaker:

Right.

Speaker:

Tape is great for.

Speaker:

Certain things, right?

Speaker:

Being the additional copy, if you've already got a copy on disc,

Speaker:

easily copying that copy to tape.

Speaker:

It is not good for creating that first initial copy for most people.

Speaker:

But creating a a, you know, a salt mine copy, it's great for that.

Speaker:

What it's not great for is operational recovery of a lot of

Speaker:

small files and, um, and also, um.

Speaker:

You know, so the question would be, look at how often you do

Speaker:

operational recovery and see whether or not tape would make sense there.

Speaker:

But if you, um, I, I think that either a truly immutable cloud copy or tape

Speaker:

are, are perfectly viable and it's, it's gonna be a matter of personal preference.

Speaker:

So the question is, you know, it's that value of sneaker net.

Speaker:

So depending on how much data we're talking about, a pile of tapes is gonna

Speaker:

be actually quicker than a cloud copy that we've gotta pull across the internet.

Speaker:

Yeah.

Speaker:

So yeah, it just depends on the scenario and what your RTO and RPO

Speaker:

are and your tolerance for the, the downsides of both technologies.

Speaker:

Okay, so last question for you.

Speaker:

And tape will be cheaper, by the way, in mo in most

Speaker:

scenarios, tape will be cheaper.

Speaker:

So given World Backup Day passed, is there anything that you think people

Speaker:

should look out for, for the rest of until the next world backup day?

Speaker:

Is there anything that people should do?

Speaker:

Like what recommendation or what guidance?

Speaker:

What would you tell people now that World Backup Day has passed

Speaker:

as well as April Fool's Day?

Speaker:

Yeah,

Speaker:

What would you recommend for people to do?

Speaker:

so that's a great question.

Speaker:

Um,

Speaker:

course, it's a great question.

Speaker:

Come on.

Speaker:

so I'm, so I'm gonna assume, and I think I can assume that people

Speaker:

listening to this episode, you're backing up your stuff, right?

Speaker:

We're just gonna assume that what I will say is.

Speaker:

There's a very distinct, very high possibility that you're not backing

Speaker:

up some of your corporate data.

Speaker:

And the more.

Speaker:

SaaS providers that you're using, the more likely that is to be the case, right?

Speaker:

So many people do not back up their SaaS data, and I, I think that, you

Speaker:

know, as time goes on, we will see more and more outages and more and

Speaker:

more people will, comp companies will suffer data loss, um, as a result

Speaker:

of not backing up their SaaS data.

Speaker:

Yeah, I actually just read an article this morning in the register where they talked

Speaker:

about Keep It, which is a backup vendor

Speaker:

Yeah,

Speaker:

looking to expand to.

Speaker:

Support many, many, many more SaaS applications because like you

Speaker:

yeah,

Speaker:

Enterprises, corporations are using more and more SaaS applications every

Speaker:

day and they're not being protected.

Speaker:

yeah.

Speaker:

And there are a handful of companies that are going after that.

Speaker:

After that.

Speaker:

And I highly recommend that they do that.

Speaker:

All right, that wraps up our post World Backup Day coverage Prasanna.

Speaker:

Thanks for hanging out again.

Speaker:

And happy world backup day to you, Curtis,

Speaker:

Belated, belated world.

Speaker:

Backup day, sir.

Speaker:

world backup day and hopefully next year you don't forget.

Speaker:

And maybe, maybe it moves up to the second favorite day for you of the year.

Speaker:

May,

Speaker:

yeah, maybe.

Speaker:

Maybe.

Speaker:

Yeah.

Speaker:

always hoping.

Speaker:

Always hoping.

Speaker:

All right, folks, back up your data please.

Speaker:

Uh, you know, that's all, that's all we want you to do.

Speaker:

'cause if you don't back it up, you can't restore it.

Speaker:

That is a wrap.