Episodes

Sheltered Harbor is a non-profit organization dedicated to making sure financial organizations are able to recover after a cyber attack. Even if you're not a financial institution, there is a lot to learn hear. They've done a lot of work to make this standard practical in the real world. If nothing else, you can review what they ask orgs to do and see if you can apply it to your own environment. We once again have Eric Bursley to guide us through the topic. Even Mr. Backup learned something! Me...

Today we're visited by Scott McCrady, the CEO of Solcyber, a leading managed security service provider. He says they're changing the model of how small and medium-sized companies secure their infrastructure against attacks, without any of the typical upfront cost or ongoing maintenance hassles of traditional methods. Have you tried securing your environment, only to suffer "alert fatigue?" Scott feels your pain and has fixed this by doing all of that as a service, which you pay for like a typica...

How great is it to discuss your favorite topics, learn something new, and have a great time all at the same time? That's what this episode is like. @vmiss (AKA Melissa Palmer) came on the pod for the first time this week. I've read a lot of her content and tweets over the years, and it was great to finally put a face to the name. She knows her stuff when it comes to security, since she was actually working in it before she got into VMware. It was a great conversation I think you'll learn a lot f...

We've talked a bit on this podcast about ransomware groups targeting Windows-based backup servers, and Veeam specifically. There's a new product on the market targeted at this problem, and it's called Blocky for Veeam from Grau Data. Today we have the founder & CEO of Grau Data, Herbert Grau, and their head of North American operations, David Cerf. What we didn't know until recording this episode is that these are the same people that used to make the gigantic Grau tape libraries that is used co...

LastPass made some serious blunders: how they responded to the hack in August, code they created before August, and how they configured their backup system. All of that came to a head at the end of 2023 when the hackers from August used stolen credentials to download a backed up copy of customer information. Most of it was encrypted, but they still gained a lot of information. Many are calling for customers to leave the product. However, even if you're not a lastpass customer, there are lessons ...

Today (Jan 23) marks 30 years to the day that W. Curtis Preston joined the backup industry. Fresh out of the US Navy and wanting to make a name for himself, he joined MBNA, a 35-billion dollar credit card company as "the backup guy." Within seven years he would write the industry's first book dedicated to backup, and since that time, he's gone on to be the world's leading expert in backup and recovery. What were backups like in 1993? How have things changed over the years? And how did he apapt t...

The latest in our Backup to Basics series is about making sure hackers don't delete, encrypt, or exfiltrate your backups as part of a ransomware attack. (Our Backup to Basics series reviews topics from Curtis' latest book Modern Data Protection, which you can download at druva.com/e-book.) We talk about how and why hackers are specifically targeting your backup system to either disable it or use it as a source for exfiltration. Then we talk about a number of things you can do to defend your back...

Hear the incredible story of Albert Uy, who was handed a two-year project that had already wasted 18 months. They told him he had four months to complete it. He looked at that timeline and told them there was only one way he could do, by switching horses in mid-stream. Not only did they finish it in time; they finished it early. Albert has also managed backup teams for many years, so before we cover this project story, we talk about backup has progressed over the years. We also talk about how mu...

Nothing but the best for our listeners! Curtis and Prasanna review their favorite episodes from 2022, from the time Curtis had to restore Backup Central to the shocking outage at Rackspace ( which is still ongoing!). This is your chance to catch up on what you missed last year as we prepare for a new year! Here are links to all the episodes discussed. Happy New Year! Mr. Backup Forced to Restore Backup Central Restore Test Failed to Bad Documentation Security expert rips Okta for their response...

Tomorrow marks two weeks from when the RackSpace outage started on Dec 2, 2022. They confirmed it was via a ransomware attack and it is not. going. well. We're going to do a deeper dive into this once it is all over, but this is a first-blush look at what is happening and RackSpace's reaction to it. When we recorded this episode, their reaction was not looking good. I'm sad to say it's gotten even worse. Check it out! Mentioned in this episode: Interview ad

Ok, so maybe not the most interesting topic. ;) But we promise you, this episode has a great story that involves Mr. Backup being kidnapped by a client, basically because he had a backup level issue. Learn about full backups, incrementals, cumulative incrementals, differentials, numbered levels, tower of hanoi backups, and why all this matters. It turns out it matters a lot more these days for structured backups than filesystem backups, which have typically gone to an incremental forever setup. ...

This episode we have Boris Agranovich, who has been a risk manager for decades, and speaks SIX languages (Russian, Ukrainian, Hebrew, Dutch, English, and Spanish). How amazing is that? He started the Global Risk Community, the largest online community for risk managers, and it's doing very well. We talk about the differences between what we do (as IT risk managers) and what he does, where he's managing risk for the entire organization. Fascinating guy with a unique perspective. Mentioned in thi...

Archive is NOT backup, and hopefully this episode will help you understand how/why that is the case. In this continued romp through W. Curtis Preston's Modern Data Protection, we explore the definition of archive, and how different it is from backup. You should have no trouble understanding the difference between the two after listening to this episode. As usual, Mr. Backup fills in the definition with interesting stories of what happens when you confuse backup and archive. Enjoy! Mentioned in ...

As we continue our "Backup to Basics" series, we touch on one of the most important questions of all: what is backup and restore? (And how does it different than archive and retrieve?) The answer to these questions are both simple and nuanced. It's important to have a solid understanding of backup and restore in order to understand how archive is different. Reminder: You can download a complimentary copy of Mr. Backup's latest book, Modern Data Protection here: https://druva.com/ebook. Mention...

This episode follows the previous one in a very interesting way. We have a guest, Eric Bursley, whose job is to divine business and technical requirements from a vendor perspective at Presidio, an IT solutions provider. He consults with customers and helps them get from "I want" to "I need." This was a fascinating conversation that took a turn into (surprise) ransomware. Eric is a fan of the pod and knows his stuff. As mentioned in the podcast, here is a link to the music video that is the them...

We say it all the time: your backup requirements must be based on business/organizational needs. If you keep that mind, not only will your organization be better off, it'll be easier to get approval for the new backup system you want. This episode of our Backup to Basics series goes right to that core idea, and we get advice directly from one of our favorite guests: Jeff Rochlin. He is now the Head of Technical Operations at the LA Studio of Framestore, a visual effects company. In his 30+ year ...

If you have sometimes wondered if your apps should be in a public cloud, private cloud, or in your own datacenter, have we got the episode for you. And we'll also talk about how to protect those apps regardless of where they reside. We looked hard for an unbiased cloud expert, and I think we hit gold. We found Sagi Brody, the CTO of Opti9, an MSP that supports both public and private clouds, as well as on-premises backup infrastructure! We talk extensively about which types of things are appropr...

We get right to the heart of the matter in this next episode of our Backup to Basics series. (See what we did there?). Why do we even back up? It is expensive, time consuming, and no one seems to want to be in charge of it, so we do we even do it anyway. This episode is based on Chapter 1 of W. Curtis Preston's latest O'Reilly book, Modern Data Protection, which you can download for free courtesy of Curtis' employer, Druva. Curtis believes there are three categories of reasons: human disasters, ...

This week are we pleased to announce we have Joe Dehner, specialist in International Law, to discuss the legal side of e-discovery and all the things that go with it. For the first time on Restore it All, we have a lawyer discussing legal things! (Usually we just tell you we're not lawyers!) My favorite part was listening to him tell stories from actual cases that make the various points we discuss. I also enjoyed when we talk about the e-discovery boogey man, adverse inference. If you have hear...

This is a trend that's happening around the globe, and the news we got from Lloyd's of London Insurance in August is just the latest example. They're looking to exclude payments for "catastropic" and "state-sponsored" attacks. We talk about what that means. We also discuss how a plaintiff lost a recent lawsuit against their insurance company, getting $100K when what they wanted was $600K. It was how their policy was written. We also talk about a new show (streaming on Peacock in the US) called "...

The Uber attack is huge. The initial penetration teaches about MFA, and how they were able to escalate their privileges from there is simply wrong, wrong, wrong. What can you learn from this? Well, we have a cybersecurity expert, and host of the Tech and Main podcast, on the pod this week to help us figure that out. We had planned to just talk about the Uber attack, but he also wanted to talk about what happened to the LA Unified School District. Do you have kids in school, or know someone emplo...

Cyber security attacks are everywhere, and they're definitely going after what you have running in your favorite hyperscaler. Today we are joined by Paul Hadgy, CEO of Horangi Security, a cyber security company specializing in securing your cloud infrastructure. We talk about a number of things, but at one point, Mr. Backup asked him what the thought was the five biggest security mistakes people make when building out their cloud infrastructure. He gave us a pretty good list, and then talked abo...

Jira is yet another service that could be at the center of your organization, and losing the data stored in there could cost you a lot. Did you know it doesn't even have an audit trail for many things? Not only can you lose data, you might not know what was deleted or who did it! We are joined this week from two representatives from Revyz, a new service to back up Jira. They talk about what to back up and what you can do for free, along with what functionality that misses out on. They then expla...

If you don't meet your company's Recovery time objective (RTO) and Recovery Point Objective with your backup design, nothing else matters. Seriously. No one cares if you can back up – only that you can restore in a timeframe they consider reasonable. The only way that's going to happen is if you agree to these times UPFRONT. In this episode in our new back to basics series, we'll jump right into this extremely important topic. We'll explain what RTO & RPO are, what recovery time and recovery poi...