Drotos Engineering DR/BC Strategy Discussion 2022

Running Head: Drotos Engineering DR/BC Strategy
Course Title:
Student’s Name:
Date of Submission:
1

Running Head: Drotos Engineering DR/BC Strategy
1.0 Introduction
Drotos Engineering Company is planning to migrate its business to cloud computing. The
company’s applications require a 99.9% uptime. To ensure business continuity and limited
disruption of usual business processes, the company management wishes to have a clear and
concise Data Recovery/Business Continuity plan. This document presents the company
management with the Data Recovery and Business Continuity strategies that would ensure
secure and robust migration plan, ensuring little or no interruptions and recovery in case of any
disaster. This summary begins with an overview of patch management strategy that would be
employed, back-up strategy and the planned use of automated tools. A number of possible risks
that would arise are discussed in brief.
1.1 Patch Management Strategy
Patch management is an important aspect in networking that enables fixing of vulnerabilities and
ensuring that software is up to date, while fixing security flaws (Monate & Signoles, 2008). In
migrating to cloud, cloud providers take responsibility for cloud security and not being
responsible for a company’s applications, data and server security (Zissis & Lekkas, 2012). For
instance, AWS cloud provider share responsibility of security with their end users (Ullrich,
Cropper, Fruhwirt, & Weippl, 2016). Therefore, patch management is critical as Drotos
Engineering Company migrates to the cloud computing. Below is a patch management strategy
that can be employed:
i. Regular vulnerability scanning- search for patches from cloud services used by
company on a regular basis e.g. file storage systems.
2

Running Head: Drotos Engineering DR/BC Strategy
ii. Use single patching solution – if Drotos intends to migrate to the cloud and have
some of applications running on their servers, a single patch solution has to be used.
iii. Manage inventory of devices and servers so as to reduce time that IT manager spends
assessing patch status.
1.2 Back-up Strategy
As companies move to cloud, they mostly don’t understand that cloud service providers only
provide redundant backup systems from their end and not responsible for a user’s end
application (Sharma & Singh, 2012). Therefore, in case of accidental data loss from the end
user’s side, it may become a disaster. Therefore, a clear backup strategy has to be
formulated.
i. Understand what cloud service provider covers in data protection
ii. Implementing a third party backup solution
iii. Train employees in backup best practices associated with the cloud so as to prevent
or limit human errors that would lead to data loss.
iv. Setup data access policies among staff. Roles and permissions have to be assigned
well to ensure data read/write is done only by authorized personnel.
v. Test company’s restore to help understand how long, in the event of disaster, will it
take to recover from data loss and help in coming up with appropriate contingency
plan
3