Off-site data protection

<h2 id="data-vaults">Data vaults</h2>
<p>The storage of off-site data is also known as vaulting, as backups are stored in purpose-built vaults.  There are no generally recognized standards for the type of structure which constitutes a vault.  That said, commercial vaults typically fit into three categories:
</p>
<ul><li>Underground vaults – often converted defunct cold war military or communications facilities, or even disused mines.</li>
<li>Free-standing dedicated vaults</li>
<li>Insulated chambers sharing facilities – often implemented within existing record center buildings.</li></ul>
<h2 id="hybrid-on-site-and-off-site-vaulting">Hybrid on site and off-site vaulting</h2>
<p>Hybrid on-site and off-site data vaulting, sometimes known as Hybrid Online Backup, involve a combination of Local backup for fast backup and restore, along with Off-site backup for protection against local disasters. This ensures that the most recent data is available locally in the event of need for recovery, while archived data that is needed much less often is stored in the cloud.<a class="footnote-ref" id="fnref:1" href="#fn:1"><sup>1</sup></a>
</p><p>Hybrid Online Backup works by storing data to local disk so that the backup can be captured at high speed, and then either the backup software or a <a href="/facts/Cloud_Storage_Gateway/94RXzkP1">D2D2C (Disk to Disk to Cloud) appliance</a> encrypts and transmits data to a service provider. Recent backups are retained locally, to speed data recovery operations. There are a number of cloud storage appliances on the market that can be used as a backup target, including appliances from <a href="/facts/CTERA_Networks/XwzXcqvw">CTERA Networks</a>, <a href="/facts/Nasuni/UEatpcsr">Nasuni</a>, <a href="/facts/StorSimple/kh0InYBG">StorSimple</a> and TwinStrata.<a class="footnote-ref" id="fnref:2" href="#fn:2"><sup>2</sup></a>
</p>
<h2 id="statutory-obligations">Statutory obligations</h2>
<p>Data Protection Statutes are usually non-prescriptive within the commercial IT arena in how data is to be protected, but they increasingly require the active protection of data.  United States Federal entities have specific requirements as defined by the U.S. National Institute of Standards and Technology (NIST).  NIST documentation can be obtained at <a href="http://csrc.nist.gov/publications/PubsSPs.html">http://csrc.nist.gov/publications/PubsSPs.html</a> and commercial agencies have the option of using these documents for compliance requirements.
</p>
<ul><li>History – today's regulatory requirements started with the "Rainbow" Series.  Every organization has used these standards to develop "their" version of compliance – don't get wrapped around the NIC on compliance – use "Due Care" and apply "Due Diligence" and base your infrastructure using "SECURITY" as the foundation.</li></ul>
<p>Statutes which mandate the protection of data are:
</p>
<ul><li><a href="/facts/Federal_Information_Security_Management_Act_of_2002/lbSxXscD">Federal Information Systems Management Act (FISMA)</a> – US</li>
<li>GAO Federal Information System Controls Audit Manual (FISCAM) – US</li>
<li><a href="/facts/Health_Insurance_Portability_and_Accountability_Act/b40VtyEC">Health Insurance Portability and Accountability Act (HIPAA)</a> – US</li>
<li><a href="/facts/Sarbanes%E2%80%93Oxley_Act/pfYfkDD2">Sarbanes–Oxley (SOX)</a> – US</li>
<li><a href="/facts/Basel_II/T4Sn0p1d">Basel II</a> – International – US</li>
<li><a href="/facts/Gramm-Leach-Bliley_(GLBA)/S3mRbuGp">Gramm-Leach-Bliley (GLBA)</a> – US</li>
<li><a href="/facts/Data_Protection_Act_1998/wKpAe8EH">Data Protection Act 1998</a> – UK</li>
<li><a href="/facts/Foreign_Corrupt_Practices_Act/wHfP6qlP">Foreign Corrupt Practices Act ("FCPA")</a> – US</li></ul>
<h2 id="legal-precedents">Legal precedents</h2>
<ul><li>Thomas F. LINNEN, et al. v. A.H. ROBINS COMPANY, INC., et als, (Mass. Super. Court, No. 97-2307).</li>
<li>Linnen v. Robins, 1999 WL 462015, 10 Mass. L.Rptr. 189 (Mass Super. Court, 1999).</li>
<li>FJS Electronics v. Fidelity Bank</li>
<li>Zubulake v. UBS Warburg</li>
<li>Coleman (Parent) Holdings, Inc. v. Morgan Stanley & Co. Inc., 2005 Extra LEXIS 94 (Fla. Cir. Ct. 23 Mar. 2005).</li></ul>
<h2 id="see-also">See also</h2>

Look up <i>Off-site</i> in Wiktionary, the free dictionary.

<ul><li><a href="/facts/Backup/ldV72CkU">Backup</a> (as off-site data protection is part of a comprehensive backup strategy)</li>
<li><a href="/facts/Remote_backup_service/nT88cekN">Remote backup service</a></li>
<li><a href="/facts/Comparison_of_online_backup_services/jtHfHd31">Comparison of online backup services</a></li>
<li><a href="/facts/Bare-metal_restore/6xClv4Pm">Bare-metal restore</a></li></ul>

<ul><li><i>Protecting Data Off-Site</i>. Gerard Nicol 2006 <a href="/facts/ISBN_(identifier)/15AdSPa9">ISBN</a> 0-9802859-0-9</li></ul>

<h2 id="references">References</h2>

<ol>
<li id="fn:1"><p>"Ctera Drives Hybrid Approach to Backup". CTOEdge. 13 April 2010. Retrieved 8 June 2010. <a href="http://www.networkcomputing.com/backup-recovery/barracuda-boosts-capacity-of-premisescloud-backup-appliance.php" target="_blank">http://www.networkcomputing.com/backup-recovery/barracuda-boosts-capacity-of-premisescloud-backup-appliance.php</a> <a href="#fnref:1" class="footnote-back-ref">↩</a></p></li>
<li id="fn:2"><p>Boles, Jeff. Hybrid cloud backup: D2D2C emerging as a viable data backup strategy. SearchDataBackup, 2 May 2011 <a href="http://searchdatabackup.techtarget.com/tutorial/Hybrid-cloud-backup-D2D2C-emerging-as-a-viable-data-backup-strategy" target="_blank">http://searchdatabackup.techtarget.com/tutorial/Hybrid-cloud-backup-D2D2C-emerging-as-a-viable-data-backup-strategy</a> <a href="#fnref:2" class="footnote-back-ref">↩</a></p></li>
</ol>

Off-site data protection open-in-new

Off-site data protection