4 ms·
I don't know the data you're holding. If it is sensitive data, like customer anything, would it infact make sense not to have offsite backup? Reasoning: Your
by zhte415 7y ago
I don't know the data you're holding. If it is sensitive data, like customer anything, would it infact make sense not to have offsite backup?
Reasoning: Your contract with Amazon promises durability and I'm sure there's a service level agreement with penalty/liability clauses. By implementing a redundant backup, you're replicating something that you don't legally need to have, double-or-more due diligence on the offsite backup security/credentials, and in case of a failure of Amazon create a grey area with clients "Do you have the data, or do you not?"
In short, there could be a very good business reason not to do offsite backups.
- michaelmrose 7y agoRegardless of durability if you lose your customers data are you sure you will have customers paying you to keep you in business while you figure out liability?
- zhte415 7y agoIn this case, it was not losing data, but losing access to data. The data was eventually restored. Lose customers' data could also mean losing the backup: "We're sorry, the tape that we didn't needed to keep has been lost/zero-dayed/secondary service provider has gone bankrupt/Billy's house that we left it at got robbed." These must be disclosed to a customer immediately. Minimising attack/liability surface is not only a technical problem, but a business one too.