Tuesday, December 15, 2009

December 15, 2009 :: Data backups, privacy, and reliability in the digital world

Any important data should be in three places, minimum. You cannot assume that online systems, even ones for which you pay, are invulnerable. For long range planning, in a 3-10 year plan for data security and reliability, you must retain control of your data, and data backups.

How Facebook Is Making Friending Obsolete - WSJ.com: "those who want a private experience on Facebook will have to work harder at it: if you inadvertently post a comment on a friends profile page that has been opened to the public, your comment will be public too."

Having privacy in the online world is a shrinking commodity. This WSJ.com article illustrates that profit is not assumed in huge sites like facebook, which the article points out is the 5th most popular, yet barely profitable.

IMPORTANT LESSON: Don't rely completely on online systems for your valuable data! (Yes, that lesson ended with an exclamation point.)

Remember when MySpace was king? Remember when AOL was super-king? How about Yahoo? Enron, Lehman Brothers, etc. I tell my wife, that moving photographs from the camera to the computer is the FIRST step. Do not delete the photos from the camera's memory card (backup #1). Then she needs to backup the computer using Apple's TimeMachine (backup #2). Then upload the original format photo somewhere which isn't facebook, such as picasaweb, where she can still access the original photo for mass download (backup #3). Then, she has not a single photo if her camera and computer (with its backup) are lost, for example, tornado or flood which takes the house with all contents.

The moral is that large companies fail, consumers' tastes change, technology develops, and your data is not safe exclusively in one place. My prior career had me responsible for hundreds of companies' data, consisting of websites, databases, and draft designs, plus our own financial data, including accounting, accounts, contacts, etc. When I drafted backup systems for my own organization, I was nervous about data loss when I saw a single backup fail. Because backup tapes degrade with time and CD's/DVD's can be easily damaged, I used several systems to back each other up. Drives mirrored each other online (backup #1). Mirror images of working hard-drives backed up crucial data every night onto offline disks (backup #2), backups of those were made onto tapes (backup #3), tapes were rotated off site in case of fire (backup #4), and some data was backed up to remote servers across the net (backup #5). More than one backup, so that any one failure, or two linked systems could fail, and no one would loose data.

Law firms are in a strange position of having to have absolute reliability for data, but it MUST remain confidential. Enter encryption for remote, cloud-based backups. Incremental backups keep the cost down on a recurring basis, while the firm retains control over backups and restore ability.

People's individual's computers in a firm scares me quite a bit, because much of their work, their data, is not backed up at all. Weak data security policy is one where the user has to do something. Where a network drive is provided and users are encouraged to back up their work, a computer is not replaceable within a day or so in case of "sledgehammer syndrome." I ask, "if I take a sledgehammer to your computer, how long would it take to be working on another computer, having all your data back?" It's a good, fair question with individual computers. With Apple's TimeMachine, right now, I can be up and running within two hours with a new computer with every bookmark, every file, every blog entry, and almost no lost time.

Relying on one backup is not good enough. Relying on people to back things up is the equivalent of free-solo rockclimbing: as long as nothing bad happens, it's cheap, enjoyable, and care free. My advice to both groups: enjoy it, just realize that one slip and you're through.

No comments:

Post a Comment