There have been many examples of misplaced hard drives exposing sensitive information. The most recent example being the Travel Security Administration losing an external hard drive which contained 100,000 employee records. Companies continue to strive to lock down their live environment yet ignore the security implications of back-ups. What makes this data less sensitive when it exists on a back-up tape than when it existed on a live server?
The attack surface of course changes. You can’t use an SQL injection attack over a web connection against a back-up tape sitting on a shelf. However it is a lot easier to walk out the door with a back-up tape under your coat than to try and carry out a live server. The fact of the matter remains; regardless of attack surface the data classification does not change. The business impact of that data being exposed is no less significant. So what should be done?
Security for data back-ups is not a cut and dry issue. The answer of “encrypt the data” is too simple to be helpful. How often are back-ups taken? What media are they stored on and in what format? Where is this media kept? How long do we keep back-ups? How is media handled when the data has reached the end of its life cycle? These are all questions to be considered.
While each type of back-up is a very different animal and should be treated in different ways, in the end one tenet holds true of all back-ups regardless of shape or size: A copy of data is no less sensitive than the original data.
- John
