Laserfiche WebLink
6.D. - Page 16 of 33 <br />attack occurs with inadequate backup processes in place, there is no way to recover. Moreover, a <br />proactive and well -thought-out business continuity plan is something that all system and data <br />administrators must embrace. <br />What is a good backup strategy? Certain applications provide the ability within the applications <br />themselves to set up different types of backups and schedule them to be performed <br />automatically. A good example of this is SQL.31 Using a SQL -based approach, both nightly full <br />database backups can be scheduled as well as intermittent transaction log backups (which <br />capture activity during small time increments), so that a recovery could be completed with <br />virtually no loss of data. These backups should then be stored according to the 3-2-1 backup <br />rule32 whereby three copies or versions are taken, stored on two different media, one of which is <br />offsite. Operating systems and third -party vendors offer a multitude of backup solutions for <br />servers. Snapshots or image backups33 provide the most complete backup and the fastest restore <br />option.34 <br />Raj Samani, Chief Technology Officer for Europe at Intel Security captures the importance of a <br />complete backup strategy, "Most Ransomware attacks can be avoided through good cyber <br />hygiene and effective, regular data backups that are continually tested to ensure they can be <br />restored if needed."35 <br />As this discussion shows, the technology to prevent and if necessary, correct, the impact of a <br />malware attack is available. Local government agencies must be pro -active and vigilant in using <br />such to protect their data and their businesses. <br />Investigation Results Regarding Employee Traininz <br />Education is the best defense. "Preventing infection is far easier than correcting the situation as <br />most of the infections are acquired either from a socially engineered email (one that appears <br />reputable or from a familiar source), or from visiting an infected website, so controlling risk on <br />your side is the easiest method.1136 <br />Answers to Survey Question #5 provide strong evidence for the need for the governing boards to <br />review with their IT managers their defenses against cyberthreats: "Do you provide training to <br />employees regarding malware? " 12 responded with a non-qualified "Yes". Nine responded <br />"No" (24%) and 16 responded with a qualified "Yes" (42%) and described their training as <br />needing improvements.37 As one survey responder commented, "The answer is yes, but a lot <br />more needs to be done." <br />31 Structured Query Language (SQL) is a programming language <br />32 Management Wire, The 3-2-1 Backup Rule and Effective Cybersecurity Strategy, January 7, 2020. <br />33 Image backup consists of block by block storing of the contents of a hard drive <br />34 https:\\www.ltnow.com/file-backup-vs-image-back-which-is-best% <br />35 Zerto, Raj Samani, Ransomware — Mitigating the Threat of Cyber Attacks, 2019 <br />36 Epicor, Protecting Yourselffrom Ransomware, January 2020 <br />37 Grand Jury Survey responses <br />2019-2020 San Mateo County Civil Grand Jury <br />137 <br />