Beyond your process, you’ll also need some tools in your toolbox, and a cloud-based backup is a must. Backing up workstations to cloud storage is an absolute must to helping prevent data loss, particularly during the era of heavy remote work, as people may be more lax about connecting to a corporate server to save their files. If you can, try to back up the entire endpoint, or at least critical business documents. And make sure to schedule your backup jobs so you still meet your recovery point objectives.
Test for recovery
Picking up on a theme from earlier, you’ll want to make sure you’re ready when the time comes to restore. That’s why we recommend frequently testing your customers’ backups for recoverability. The last thing you want is to find out a backup has become corrupted or you can’t restore while in the middle of a crisis.
Use EDR with rollback
Finally, SolarWinds® Endpoint Detection and Response (EDR) includes an automated rollback feature that can restore an endpoint based on Windows to a safe state quickly after a potential threat. In fact, it can take a number of policy-driven actions, including quarantining files, disconnecting endpoints from a network, or blocking connections to malicious sites. While EDR was mentioned in the previous blog on detection, it plays a pivotal role in the response and recovery processes as well. As customers work remotely, EDR can work almost as independent incident response teams on each endpoint, often stopping an issue before it takes causes too much damage. And since 76% of organizations predicted remote work would increase IR times in this year’s Cost of a Data Breach report from Ponemon and IBM, the automated rollback feature could be worth its weight in gold. Still, it’s important to note that this feature isn’t a replacement for cloud-based backup. You’ll still need it for rollback on machines that aren’t Windows, and it’s still important for other forms of data loss.
Keeping your cool under pressure
Security incidents will occur despite your best laid plans and defenses. It happens to large enterprises as much as it happens to small businesses. What makes you prove your worth to your customers comes down to how you handle the incident, and how quickly you get them back up and running. Make sure to have a good IR process in place so you can keep your customers safe (and happy).
Sometimes, there’s a snag when it comes to recovery. On the one hand, you need the right tools to make sure you can restore data in a pinch. But some customers may skimp on backup in an attempt to save cost, often without really understanding the risk until it’s too late. To help you solve this problem, don’t miss our free eBook, The Big Book of Selling Data Protection. It’ll help both your customers’ readiness for a data loss event and help improve your bottom line. Get your copy today.