Blog Creating an Effective Data Recovery Strategy for Your Government Agency
By Carmen Taglienti / 15 Feb 2022 / Topics: Data and AI Cybersecurity
Discover the three steps public sector agencies can implement to boost their cybersecurity and data recovery strategy to adapt to a transforming digital landscape.
Over the past few years, agencies within the public sector have worked diligently to minimize cyber threats from compromising data security. But with the start of the pandemic — and consequently, a rapid increase in hybrid work environments — the cybersecurity game has changed. With this amplified digital landscape, the need for a more robust data recovery strategy has emerged.
During an online webinar with GovLoop, Brian Gardner (Chief Information Security Officer (CISO) for the City of Dallas, Texas) and I reviewed best practices government agencies can implement to build an effective data recovery plan and protect their critical assets against cyber threats.
Identify assets.
As the workforce perimeter increases, the likelihood of cyber threat also multiplies. The first step in defending data is identifying your agency’s critical assets. For example, many government agencies recognize citizenry information as a critical data asset to the organization.
To discover which assets are most critical to your specific agency, ask questions like:
- Which of our assets will have the most negative impact on the agency if compromised?
- What is the possible impact if we were to lose data or the availability of this data?
- How much time can the affected parties tolerate the particular asset being down?
Build data recovery strategy.
Once you have identified the assets most critical to your organization, you can start building out your strategy. Begin by applying a cybersecurity methodology to help you align your ideas to proven processes. The NIST Framework is a great example of a cybersecurity framework that helps your organization lay out procedures to protect, detect, respond, and recover from cyber threats.
When building out your data recovery strategy, ask questions like:
- How or what technology, human resource, and workflow processes are needed to successfully mitigate a cybersecurity incident?
It is also important to include processes around backup data storage as a key element of your data recovery plan in the event that your original online storage mechanism is lost.
Test strategy effectiveness.
It’s great to have a plan, but does your agency have the resources to successfully execute your strategy? Many organizations may have the right procedures to launch a recovery initiative, but too late discover they lack the technical infrastructure to carry out the idea.
Do not wait for an emergency to find out if your recovery plan is effective. Public sector agencies deal with highly sensitive assets, and a failed recovery process can have long-term consequences to organization and state citizenry. Frequently testing the effectiveness of your data recovery plan is imperative to the full protection of your organization.
Final thoughts
With cybersecurity, prevention is key. Data recovery strategies must exceed the increased risk that a hybrid workforce faces with employees working within extended cyber perimeters. Organizations that proactively strategize for cyberattacks mitigate the high consequences of losing critical assets and effectively defend their data from harm.
Mitigate cyber risks with confidence. Insight & GovLoop can help your agency identify the right steps to keep your digital assets safe.
About the contributor:
Carm Taglienti
Chief Data Officer & Data/AI Portfolio Director and Distinguished Technologist, Insight
Carmen has more than 25 years of experience as a cloud computing, data science, data analytics and data management expert. As a principal cloud and AI architect for Insight, he focuses on cloud-based business solutions across multiple industries and technical domains. He also serves as an adjunct professor at Northeastern University Khoury College of Computer Sciences and the College of Professional Studies teaching graduate courses in data science, cloud computing and analytics. Carmen is a published author and speaks at industry and technology events.
