A6：技术弹性 - buzz是什么？.pdf

1、Technical Resilience:Technical Resilience:Whats all the buzz about?Whats all the buzz about?May 6-8,2024|Charlotte,NCAlice Kaltenmark,Hon FBCI,MBCP Kaltenmark Consulting LLC BCI Cyber Resilience SIG Leader ResilienceA definition according to ISO ability to absorb and adapt in a changingenvironmentSO

2、URCE:ISO 22300:2021,3.1.206,modified Note 1 to entry deleted.ISO 32210:2022(en),3.28May 2024Kaltenmark Consulting,LLC 20242Resilience BasicsData Protection backups,snapshots,offline/off-account backups Dependencies what do you need to restore?Plan list of tasks to restore/recover Test does it work?N

3、eed proof!May 2024Kaltenmark Consulting,LLC 20243Resilience ThreatsFailure process,application,infrastructure,network Corruption data loss,data corruption,configuration corruption Cyber attack malware,ransomware,infrastructure encryption,data encryption May 2024Kaltenmark Consulting,LLC 20244Restore

4、&Recover PathProduct and Application StackNetwork Compute/Storage Infrastructure Data/Metadata/DatabaseTooling including source code Product/System Platform Product/Application Customer Availability Core Infrastructure:DNS,Firewalls,Active Directory/Domain Controllers Recover&Test each layerCloudOn-

5、PremiseMay 2024Kaltenmark Consulting,LLC 20245Restore&Recover BasicsMay 2024Kaltenmark Consulting,LLC 20246 Data Protection:backups,snapshots,offline/off-account backups Dependencies:what do you need to restore and in what order?Documented discoverable Plan Playbook:prioritized list of tasks to rest

6、ore/recover&how long will it take?Documented discoverable Test:does it work?Need proof documented&reported resultsOutcome Resilience Capability Requires restore&recover basics applied to each layer in the stack Resilience Perspectives:Then and NowMay 2024Kaltenmark Consulting,LLC 20247ThenNowTraditi