SOLUTION PROVIDER SPOTLIGHT Sponsored Content


Healthcare and Ransomware 2022: Secure your data and recovery in the data center and the cloud


A


William Burns Strategic Vertical Director


Healthcare & Life Sciences - Veeam Software Corporation


t Healthcare Innovation’s Pacific Northwest Summit on October 11, William Burns, strategic vertical director, Healthcare & Life Sciences at Veeam Software Corporation gave a presentation entitled “Healthcare and


Ransomware 2022: Secure your data and recovery in the data center and the cloud.” “There has never been a more challenging time to be in


healthcare IT,” Burns said, kicking off the presentation. Burns added, “There is not a week that goes by that I


am not on the phone with an organization that isn’t com- ing off of, or in the middle of or recovering from some sort of cybercrime or ransomware attack. If it hasn’t happened to your organization, I can almost guarantee that it will. Next, Burns commented on the “reality gap” organi-


zations may have. He explained that an availability gap is a gap between how fast an organization can recover applications versus how fast the applications need to be recovered for users to return to full productivity. Burns then said that a protection gap is a gap that an organization has between how frequently their data is backed up versus how much data can be afforded to be lost in an outage. He added that there are a lot of reasons for outages, for example software failure, that are predicable in terms of downtime. Yet, when there is a cyber threat, the bad actor may have been inside the network for quite some time already. Burns also shared some interesting statistics from


Veeam’s “2022 Data Protection Trends” report, including: • Globally, 76 percent had at least one ransomware attack • Thirty-six percent, both in healthcare and globally, of data was unrecoverable after a ransomware attack Burns then shared that South Georgia Medical Center


(SGMC) leverages two solutions from Veeam with Microsoft Azure, including Veeam Availability Suite, and Veeam Backup for Microsoft 365. SGMC’s ongoing chal- lenge was protecting patient data in the age of ransom- ware, so SGMC took a proactive approach by increasing security measures already in place. SGMC’s results were:


• Protects data from ransomware through encryption and immutability


• Recovers imaging and diagnostic data quickly to expe- dite patient care


• Complements the Microsoft 365 Litigation Hold to meet legal compliance


Veeam Availability Suite™ backs up and encrypts


more than 500 TB across 430 Microsoft Hyper-V virtual machines and 20 physical machines to a hardened Linux storage repository, making backups immutable. Veeam also replicates to Microsoft Azure Blob Storage via Veeam Scale-out Backup Repository (SOBR), an automatic tiering feature that supports the 3-2-1-1-0 Rule (3 different copies of data on 2 different media with 1 copy offsite and 1 copy that is air-gapped, immutable or offline and 0 backup recovery errors). Burns quoted Chuck Marshburn, CIO and HIPAA secu-


rity officer at SGMA during the presentation. “Our health- care professionals require immediate access to data so they can provide exceptional patient-centered care, including data supporting digital prescriptions, imag- ing and patient monitoring,” Marshburn said. “Veeam protects this data, so if we experience a ransomware attack, we know we can retrieve it quickly, resume care and avoid a costly ransom payment.” Burns expanded on the idea of the 3-2-1-1-0 Rule, “The


Data Protection Zip Code.” He said, “If you are going to do one thing—take this to heart. We talk about it a lot, but that’s because it is important. Make the right number of data copies, in different locations, ensure at least one is immutable, that you do that frequently and have this policy enforced and ensure that you regularly test your ability to recover.” The slide at this time showed five numbers, just like a zip code: • 3: Three different copies of data • 2: Two different media • 1: One offsite copy • 1: Of which is: offline air-gapped or immutable • 0: No errors after automated backup testing and recov- erability verification


One last thing Burns brought up was detecting issues


with backup verification. He said, “You can never have enough visibility into your network. Our goal is to have every backup job run successfully on the first try. To that end, we provide assurances your backup jobs are running as expected and if there is an issue, you can be notified immediately. This seems obvious but it’s amazing how many backup job failures are discovered in the middle of an attack.”


www.veeam.com


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24  |  Page 25  |  Page 26  |  Page 27  |  Page 28  |  Page 29  |  Page 30  |  Page 31  |  Page 32