Business Continuity and Disaster Recovery

Category

Requirement

CSCC

SAMA CSF

ECC-1

Business Continuity & Disaster Recovery

Show mechanisms that facilitate contingency planning controls to help ensure resilient assets and services.

2-8
3-1
3-1-1-1
3-1-1-2

2-4-4
2-9-1
2-9-2
2-9-3
2-9-3-1
2-9-4
3-1-1
3-1-2
3-1-3
3-1-3-1
3-1-3-2
3-1-3-3
3-1-4

To help manage business continuity and disaster recovery, Lucidum first helps you accurately inventory and identify assets and implement and manage asset security controls. After Lucidum ingests data from your security solutions, Lucidum uses graph data, machine learning, and predictive analytics to detect and classify all assets and users, even those not detected by the solutions in your environment.

You can then create queries to find a list of all assets in your environment that are not backed up, export the list, or create dashboards.

Find Assets That Are Not Included in Backups #

To find assets in your environment that are not backed up:

  1. Configure Lucidum connectors for backup or disaster recovery solutions in your environment (for example, Arcserver, Barracuda, Datto, Nasum, Veeam, Veritas).

  2. Configure Lucidum connectors for the cloud backup solutions in your environment (for example, AWS Backup, Azure Backup, Barracuda cloud, Google Cloud Backup).

  3. After Lucidum ingests data from backup solutions, you can then create queries to find a list of server and VM assets that are not backed up.

    • In our example, we are using Veeam

    • Our query is: “find assets where asset type is server or VM and data source does not match Veeam”

    • This query finds server assets and VM assets with no data from Veeam. In our environment, if asset records do not have information from Veeam, they are not being backed up.

  4. The query results display the server and VM assets that are not regularly backed up.

  5. You can use these query results in a dashboard.

  6. To remediate these assets, add them to a backup solution.

  7. After Lucidum ingests data from cloud backup solutions, you can then create queries to find a list of cloud assets that are not backed up.

    • In our example, we are using AWS Backup

    • Our query is: “find assets where cloud asset is yes AND data source does not match AWS Backup.

    • This query finds cloud assets with no data from AWS Backup. In our environment, if cloud asset records do not have information from AWS Backup, they are not being backed up.

  8. The query results display the cloud assets that are not regularly backed up.

  9. You can use these query results in a dashboard.

  10. To remediate these cloud assets, add them to a backup solution.

  11. Perform these steps frequently.