Cloud Backup for AI Enabled Cyber Resilience

In today's digitally-driven environment, organizations are increasingly at risk of cyber threats, particularly ransomware and data-destructive attacks, which underline the necessity for comprehensive cyber resilience strategies. The EU has established directives like NIS2 and DORA to enhance both general and financial sector resilience against such threats. Cyber resilience involves not just thwarting threats but also ensuring rapid recovery of critical data and infrastructure. Challenges include protecting cloud data, addressing IT failures, and adhering to regulations like GDPR and SOX, which mandate data security. To combat these issues, robust data backup and disaster recovery solutions are essential. Such systems create duplicates of data and systems, facilitate swift restoration post-catastrophe, and offer features like application-aware and snapshot backup for data consistency. The 3-2-1 backup principle is crucial for securing data, emphasizing multiple copies and off-site storage. Integrating AI and ML can also enhance detection and response to threats. Organizations are advised to choose solutions that include capability for quick disaster recovery, protection of cloud services, stringent regulatory compliance, and the use of advanced technologies like AI and ML for optimal efficiency.

• Destructive attacks are more costly than ransomware and data exfiltration, averaging USD 5.68 million.
• The EU's NIS2 Directive and DORA Regulation extend resilience requirements to the financial sector.
• In 2021, a major data center fire in France disrupted services for many businesses by hindering data access.
• Cloud services only provide limited built-in data protections, leaving additional responsibilities with the customer.
• The EU General Data Protection Regulation (GDPR) mandates measures for data confidentiality, integrity, and availability.
• Data deleted in services like M365 are only retained for 30 days.
• SOX requires backed-up financial records for audit purposes.
• 75% of enterprises plan to increase their cloud service usage as reported by cloud providers.

• "Destructive attacks, which are intended to cause lasting and expensive damage, reached an average of USD 5.68 million."
• "To ensure cyber resilience, organizations must take steps beyond security controls."
• "Cloud services provide some levels of protection for data that they hold, this cannot be taken for granted."
• "If an organization is unable to access its data or systems, the entire business could be destroyed."
• "Application-aware solutions understand the structure and dependencies of application data."
• "The 3-2-1 backup principle recommends holding three copies of the data on two different types of media with at least one physically separated offsite."
• "End users can delete data by mistake or as a deliberate act of sabotage."
• "The solution should enable the coordinated restoration of data for multiple service components to the same point in time."
• "Cloud customers are always responsible for protecting their data."