Final report
Running head: DISASTER RESPONSE SECURITY 1
DISASTER RESPONSE SECURITY 2
Disaster Response Security
Santosh Reddy Tera
IGlobal University
Professor: Mark O’Connell
Course: MIT681
Date: 11/20/2018
Information security and disaster recovery in Snowflake Company
In the Information Technology industry, the issues of Disaster Recovery security frequently pop up. There is a need to address matters of information security because it is becoming a disaster in becoming a disaster. The storage managers should be keen on the data security from all perspective and more so the malicious attackers. Snowflake Company has been able to manage the issue of the data security by addressing the matters of malicious attacker and recovery plan in case it happens. A patch of the system has prevented most of the data securities and the use of backups. Strong passwords are also being used on the accounts which make the managers make assumptions that the basic measures can be enough to provide data security. These assumptions make the data to be vulnerable to malicious attackers. The backups, storage management, Web interface, and Disaster Recovery Management are exposed to much vulnerability although the storage managers fail to give it much consideration. The Web vulnerabilities can be seen from the perspective that flaws and default password can allow the attacker to bypass the mechanism of logging in.
Steps for protection against security vulnerabilities in Snowflake Company
There is a need for the store managers to understand the risks which are involved. It is good after being conversant with the potential threats, necessary steps are taken to minimize the occurrence of the risks. Sometimes, people end up addressing the wrong issue by providing solutions to the wrong problems. When an organization understands the real threat to the data security, it is easy to come up with the right management strategies which boost or enhance protection mechanism. Snowflake Company ensures that the policies tackling data security are well addressed and all the procedures to increase the security of the data are followed (Siponen, Mahmood, & Pahnila, 2014). The policies and procedures are also accompanied by their recovery plan to recover the data when there are malicious attackers. Similarly, the incident response has a connection to information security. Incident response means that steps are taken so that malware outbreaks and data breaches are addressed with a proper response. The incident response translates into disaster response because if the correct response is taken on data attack, definitely there would be the recovery of the data. Business and organization should have a recovery plan that would enable it to recover data when the Information Systems is attacked due to malware or floods. It is good for the organization to have competent security that ensures that all the information is secure and it is not exposed to vulnerabilities due to careless mistakes.
Technologies for disaster recovery security in Snowflake Company
The technology which is used in the provision of the data security depends on the applications, layout business which is being protected or the organization and network used. Some of the technologies can be complex, and most of the complex and expensive technology is the solution to addressing data insecurities. Continuous Data Protection is another technology which is used to ensure that the data is secure and not exposed to vulnerabilities. Disaster Response Security can also be addressed through server environment and resilient network perimeter which promotes continuity built in. The technologies of access management and identity can also be used to those using the data when there is something that has gone wrong. The Disaster Response Security which is good for some companies is usually based on the risks which are involved and need for the protection. The Disaster recovery plan of business enables it to come up with the best strategies which can make the business to be secure and maintain good relations with the customers.
Additionally, the large enterprises have security staffs or the Information security staffs who would be involved in handling matters of data security. In the Snowflake Company, the security administrators are dedicated to ensuring that all the data is secure. This can be done by first testing the environment of the business to understand how secure it is too malicious attacks (Sahi, Lai & Li, 2016). The company can also make use of the scanning vulnerability tools to understand areas which need to be improved. Disaster recovery environment plays an important role in increasing the safety of the data. Disaster recover security enables the company to plan about future activities regarding security. There is a need for Information Systems to ensure that the organization is prepared in case there is a malicious attacker. Breaches have led to the destruction of the customer relationship especially when there is access to private information about the customers. When hackers access that information, it can be much cost for the organization as some of the hackers end up accessing the private data of the customers especially of transactions and bank details.
References
Dashti, A. (2018). Mobile Cloud Computing Security Frameworks: A Review. In Cloud Computing Technologies for Green Enterprises (pp. 292-317). IGI Global.
Sahi, A., Lai, D., & Li, Y. (2016). Security and privacy-preserving approaches in the eHealth clouds with disaster recovery plan. Computers in biology and medicine, 78, 1-8.
Siponen, M., Mahmood, M. A., & Pahnila, S. (2014). Employees’ adherence to information security policies: An exploratory field study. Information & Management, 51(2), 217- 224.