IBMDataResiliencePortfolio ClientPresentationSeriesIBMSpectrumProtect IBMSpectrumProtectPlus IBMSpectrumCopyDataManagement IBMSafeguardedCopywithIBMFlashSystemCyberVault RogerDidio AdvisorySalesEnablementLeaderandSkillsContentSpecialist IBMStorageDataResiliencerjdidio@us.ibm.com June9,2022 IBMSpectrumProtect IBMSpectrumProtectPlus IBMSpectrumCopyDataManagement PortfolioConvergence IBMDataResiliencePortfolio The4C’s CyberCloud ContainersConvergence SafeguardedCopywithFlashSystemCyberVault Whenbadthingshappentoyourdata IBMSafeguardedCopy •Isolated,immutablesnapshotsofdata •SnapshotsonsameFlashSystemstorageasoperationaldata •Recoveryfasterthanrestoringfromcopiesstoredseparately IBMFlashSystemCyberVault •Automaticallyscanstolookforcorruption •Identifiesransomwareattackswhentheyhavestarted •Identifieswhichcopieshavenotbeenaffected Solutionoverview IBMStorage •Datavolumesandactivecopiesgenerated andmaintained •SpectrumVirtualizeSafeguardedCopy •Immutablecopies •IBMTapewithencryptionand/orwriteonce-readmany(WORM)technology •Secureair-gappeddatavault IBMSpectrumVirtualize •100%dataavailabilityguarantee •AuditlogintegrationwithQRadarmonitorsunauthorizedactivity •StorageInsightswarnsforchangesindatareductionratesorperformanceanomalies •IBMSecuritysolutions IBMServices •Services,clusteringtechnologies,andserverandstoragereplicationandautomation •CopyServicesManagertomanagetheentirerecoveryenvironment •IBMLabServicesriskassessmentanddeploymentservices SafeguardedCopyspeedsrecoveryfromcyberattacks Automatic creationofregularbackupcopies Immutable point-in-timecopiesofproductiondata Isolated logicalair-gapofflinebydesign Fast restorefromcopiesonprimarystorage Preventsmodificationordeletionofcopiesduetousererror,maliciousdestruction,orransomwareattack SafeguardedCopy:howitworks SafeguardedCopy 1 18:00 ProductionData 15:00 12:00 2 09:00 06:00 1.Safeguardedimmutablecopiescreatedthroughouttheday 2.Abilitytoperformrapidrestoreofimmutablecopywhenrequired What’snext? OperationalizingSafeguardedCopywithCyberVault AirGap:logicalandphysicalisolationofprotectioncopies VirtualisolationPhysicalisolation Administrators ProductionSystems Recoverysystem Restore MetroMirror Recover SAN/WAN Protectioncopies Administrators Administrators Recoverysystem ProductionSystems Restore MetroMirror Recover SAN/WAN SAN/WAN Protectioncopies •Additionalstoragesystemsareusedfortheprotectioncopies. •ThestoragesystemsaretypicallynotonthesameSANorIPnetworkastheproductionenvironment. •Thestoragesystemshaverestrictedaccessandevendifferentadministratorstoprovideseparationofduties. Assimpleas1–2–3 1 Makeimmutablecopiesofdata •SafeguardedCopy •CopyServicesManager(CSM)toautomatecreationandrestoreofcopies 2 Testcopiesofdata •Isolatedinfrastructuretotestcopies •Ensurecopiesnotcorruptedusingapplicationtools •Testinfrastructurelogicallyorphysicallyair-gapped •Blueprintfortestingandrecoveryprocess 3 Automateprocess •Automationofmakingandtestingcopies •Automationoftest&restoreprocess CyberVaultandSafeguardedCopystandapart 23days industryaveragerecovertime Afewhours CyberVault&SafeguardedCopyaveragerecoverytime CyberVaultvalueanddifferentiation Immutablecopiesofdata Proactivemonitoring •CreatedwithSafeguardedCopy •Cannotbechangedoncecreated RapidRecovery CyberVault BlueprintAutomation •EarlywarningsignsofattackwithStorageInsights •RecommendintegrationwithSIEMsuchasIBMQRadar Test/validationofdatacopies •Restoreproductionfromvalidateddatacopiesonprimarystorage •Recoveryfrompoint-in-timecopy •Recoverdatacopiestoisolatedenvironmenttochecktheyarecorruptionfree •Testrecoveryprocedures •Forensics&diagnosticsservices CyberVaultvalueanddifferentiation Immutablecopiesofdata Proactivemonitoring •CreatedwithSafeguardedCopy •Cannotbechangedoncecreated RapidRecovery CyberVault BlueprintAutomation •EarlywarningsignsofattackwithStorageInsights •RecommendintegrationwithSIEMsuchasIBMQRadar Test/validationofdatacopies •Restoreproductionfromvalidateddatacopiesonprimarystorage •Recoveryfrompoint-in-timecopy •Recoverdatacopiestoisolatedenvironmenttochecktheyarecorruptionfree •Testrecoveryprocedures •Forensics&diagnosticsservices CyberVaultvalueanddifferentiation Immutablecopiesofdata Proactivemonitoring •CreatedwithSafeguardedCopy •Cannotbechangedoncecreated RapidRecovery CyberVault BlueprintAutomation •EarlywarningsignsofattackwithStorageInsights •RecommendintegrationwithSIEMsuchasIBMQRadar Test/validationofdatacopies •Restoreproductionfromvalidateddatacopiesonprimarystorage •Recoveryfrompoint-in-timecopy •Recoverdatacopiestoisolatedenvironmenttochecktheyarecorruptionfree •Testrecoveryprocedures •Forensics&diagnosticsservices CyberVaultvalueanddifferentiation Immutablecopiesofdata Proactivemonitoring •CreatedwithSafeguardedCopy •Cannotbechangedoncecreated CyberVault •EarlywarningsignsofattackwithStorageInsights •RecommendintegrationwithSIEMsuchasIBMQRadar BlueprintAutomation TTeesstt/vVaalildidaatitoionn ooffDdataCcooppiieess • opy RReeccoovveerrddaattaa