Dalla Sicurezza al DR/HA Soluzioni per il Datacenter su piattaforme Windows VMware, AIX e IBM i

Transcript

1 Digital Best Practices for the GDPR paradigma: from Security to Business Continuity 6 Giugno 2017 Milano Dalla Sicurezza al DR/HA Soluzioni per il Datacenter su piattaforme Windows VMware, AIX e IBM i Antonio Assandri

2 SSI, un esperienza che arriva da lontano Dal 1988 affianchiamo Clienti, Software house, System integrator, MSP, Cloud provider, Outsourcer in progetti di Sviluppo Applicativo, Business Continuity, Sicurezza, Auditing, Compliance, Monitoring & Automation Business Continuity Migrazioni Data sharing Progetti di sicurezza, auditing e crittografia Monitoring System management Automazione Servizi sistemistici Sviluppo applicativo RPG e PHP

3

4 General Data Protection Regulation (GDPR) SEZIONE 2 - SICUREZZA DEI DATI Articolo 30 - Sicurezza del trattamento 1. Tenuto conto dello stato dell'arte e dei costi di attuazione, nonché della natura, del campo di applicazione, del contesto e delle finalità del trattamento, come anche del rischio di varia probabilità e gravità per i diritti e le libertà delle persone fisiche, il responsabile del trattamento e l'incaricato del trattamento mettono in atto misure tecniche e organizzative adeguate per garantire un livello di sicurezza adeguato al rischio, che comprendono tra l'altro, se del caso: a) la pseudonimizzazione e la cifratura dei dati personali; b) la capacità di assicurare la continua riservatezza, integrità, disponibilità e resilienza dei sistemi e dei servizi che trattano i dati personali; c) la capacità di ripristinare tempestivamente la disponibilità e l'accesso dei dati in caso di incidente fisico o tecnico; d) una procedura per provare, verificare e valutare regolarmente l'efficacia delle misure tecniche e organizzative al fine di garantire la sicurezza del trattamento.

5 b) la capacità di assicurare la continua riservatezza, integrità, disponibilità e resilienza dei sistemi e dei servizi che trattano i dati personali; c) la capacità di ripristinare tempestivamente la disponibilità e l'accesso dei dati in caso di incidente fisico o tecnico; d) una procedura per provare, verificare e valutare regolarmente l'efficacia delle misure tecniche e organizzative al fine di garantire la sicurezza del trattamento.

6 Business Continuity

7 BC il contrario del downtime Natural Disasters Ransomware Normal Accidents Planned Downtime Combined with power failures Combined with malware Bad patches, user error and hardware failures Planned outages and maintenance windows 25% of outages* 22% of outages* *Cost of Data Center Outage, Ponemon Institute Carbonite 2017

8 Anche i fermi pianificati sono downtime 65% of SMBs has planned for downtime at least once in the past month 1 SMB Planned Downtime 4,35% 1,74% 1,74% Not once in the past 30 days 34,78% 1-2 times in the past 30 days 3-4 times in the past 30 days 5-9 times in the past 30 days Typical downtime could cost your business up to $10,000/hour 2 10 or more times in the past 30 days 57,39% 1 Planned Downtime IT Pro Survey, Carbonite & Spiceworks, Cost of Data Center Outage, Ponemon Institute

9 Il downtime costa 38% Growth in downtime costs since 2010* $10K + Typical ransoms paid by companies for their data* $500-$10,000 Out-of-Business Typical hourly downtime costs* Many small and medium business will not survive an outage *Cost of Data Center Outage, Ponemon Institute Carbonite 2017

10 Migration Solutions High Availability and DR Cloud and DR Solutions Data sharing and management

11 ESX Hyper-V Protecting the REAL Enterprise Private Cloud on Converged Infrastructure Remote Data Center Physical Servers WAN Firewall Application Cluster Public Cloud

12 Carbonite DoubleTake DoubleTake Continuous replication to a secondary site: For availability and migration Of physical, virtual and cloud servers DoubleTake Availability Continuous replication and flexible failover for key systems DoubleTake Move Risk-free migration between any two systems Continuous Replication Near-Zero Downtime Reliable for IT Maintenance Scalable Design Award-Winning Support Byte-level protection from primary site to secondary target Recovery times in minutes with subsecond recovery points Easy to failover, in place of planned outages Negligible performance impact across protected systems 24x7 phone support from certified experts, included

13 for PowerHA BRAND FAMILY

14 MIMIX for IBM AIX Asynchronous Replication Data is transferred asynchronously with WAN optimization to minimize effects of latency on production applications Production Server Server where production applications and users reside IP Network Vision Solutions Portal Browser-based interface for system configuration, monitoring and control. Replication Group VSP container typically for a primary context and its respective failover context Context Unit of configuration and recovery, with write-order-fidelity. A primary context corresponds to production-to-recovery server replication. A failover context is for replication in the opposite direction. Data Tap Captures every write within a context at a logical volume level. This is file system and application independent and maintains write order fidelity. Recovery Server The server to which data is replicated and where users failover if the production server fails Journal of Writes Maintained on the Recovery Server so that data can be restored (rolled back) to any point in time

15 MIMIX for IBM i multi-node graphical monitor Extensive developments in autonomic capabilities ensure very low maintenance Production IBM i System Machine Interface Consistent, reliable & predictable switch times (minutes) Backup IBM i System Dynamic Apply Reader Multiple dynamic apply jobs cooperate to maximize apply performance Consistent tape backups take place on the backup system with zero production downtime Maximum hardware flexibility, servers can be different models, different storage and different OS release. Multi-node and hybrid HA clusters Low overhead remote journaling captures all data & object changes in real time below MI interface and provides efficient transport over any distance. Async and Sync modes Backup database is always on-line, consistent and ready (no vary-on required) *(1) Zero seconds with synchronous RJ and <1 second typical for asynchronous RJ *(2) Depends on customers business applications and environment

16 Vision Solutions Portal Intuitive, browser based interface Single pane of glass management for your entire MIMIX environment Runs on any device with a browser Supported on IBM i, Windows and AIX Centralized management view for MIMIX, ioptimize and MIMIX for AIX At-a-glance monitoring Highly customizable Supports user-defined views Configurable to match your working style Allows groups of users to share configurations Secure from unauthorized monitoring and control Action Required Attention (May resolve itself) Okay (Switch Ready)

17 Vision Solutions, assoluto leader di mercato Rocket icluster 2,4% Quick-EDD 8,0% Other 7,8% Maxava 3,9% Vision Solutions itera 8,6% None 43,8% Vision Solutions MIMIX 17,3% PowerHA 7,1% Robot HA / RSF HA 1,1% Elaborazione grafica SSI su dati Help Systems IBM i Marketplace Survey

18 Scenari di migrazione

19 Typical Migration Process Install OS and patches on New Install Applications on New Shut down applications Copy Data Merge data to applications Test/Verify Reroute users & applications Online

20 Typical Migration Process Install OS and patches on New Install Applications on New Shut down applications Copy Data Merge data to applications Test/Verify Reroute users & applications Online

21 Migration Process with Move Install Replication on Old Install OS and Replication on New Start Replication Synch Complete Continuous Replication Test/Verify Cutover Online

22 assicurare la continua riservatezza, integrità, disponibilità, resilienza dei sistemi e dei servizi procedura per provare, verificare e valutare l'efficacia delle misure tecniche capacità di ripristinare tempestivamente la disponibilità e l'accesso dei dati in caso di incidente fisico o tecnico

23 Contatti Via Accademia, Milano Tel 02/ Antonio Assandri 346/ ssisrl