3 ms·

There's more to backing up public and government records than a big hard drive and someone who can set up rsync. Because they're government records, there's th

There's more to backing up public and government records than a big hard drive and someone who can set up rsync. Because they're government records, there's the very good chance that there are compliance/certification requirements, plus there's infrastructure you have to put in to make it auditable while mitigating the risk of a ransomware attack affecting backups, too. Setting up total, compliant, and working backups for a small county can reasonably require a small headcount and some specialized long-term planning. E: that's not to mention that in some lower-population, lower-income counties, $400 isn't trivial to spend. There are definitely places in the States where deciding whether to upgrade a single computer from 2006 for $800 is a long conversation.

WalterBright 4y ago
How is doing nothing being compliant? As for spending $800, how is spending $37,000 more feasible? I find these sorts of exchanges astonishing. A 1Tb drive can be bought for $30 on ebay. Backing up to it is a simple xcopy or rsync command. Then put the drive in the safe. It's as simple as that.
- verandaguy 4y ago
  Ok, how often do you take it out of the safe to do periodic backups? How's access to the safe managed? What happens if you get a vindictive (ex-)employee with access to it? If the person with access to the safe loses the key, or gets in an accident and can't open it anymore, what do you do? How do you audit access to the safe to make sure nobody's pulling down data and selling it for profit on the side? How do you make sure you don't lose all your backups by having a butterfingers IT person drop the drive? How sure are you that the latest backup doesn't contain files hit by ransomware, or worse yet, the ransomware itself? If you're storing financial or medical data about the county's citizens, how are you going to handle the possibility of being legally challenged down the line about data storage practices? Handling any data in an org of almost any size is surprisingly complicated, especially if it's other peoples' data. Most people don't realize the scale of the issue because they're coming from a place of mostly working with at-home backups. In terms of spending feasibility: really depends on how funding gets allocated by the state. Like I said in another comment, the solution would be for the state to subsidize the fixed costs of putting this kind of infrastructure in place.
  - WalterBright 4y ago
    I'm sure it's better to do nothing, right? No problem coming up with $37,000.

WalterBright 4y ago

How is doing nothing being compliant? As for spending $800, how is spending $37,000 more feasible? I find these sorts of exchanges astonishing. A 1Tb drive can be bought for $30 on ebay. Backing up to it is a simple xcopy or rsync command. Then put the drive in the safe. It's as simple as that.

verandaguy 4y ago
Ok, how often do you take it out of the safe to do periodic backups? How's access to the safe managed? What happens if you get a vindictive (ex-)employee with access to it? If the person with access to the safe loses the key, or gets in an accident and can't open it anymore, what do you do? How do you audit access to the safe to make sure nobody's pulling down data and selling it for profit on the side? How do you make sure you don't lose all your backups by having a butterfingers IT person drop the drive? How sure are you that the latest backup doesn't contain files hit by ransomware, or worse yet, the ransomware itself? If you're storing financial or medical data about the county's citizens, how are you going to handle the possibility of being legally challenged down the line about data storage practices? Handling any data in an org of almost any size is surprisingly complicated, especially if it's other peoples' data. Most people don't realize the scale of the issue because they're coming from a place of mostly working with at-home backups. In terms of spending feasibility: really depends on how funding gets allocated by the state. Like I said in another comment, the solution would be for the state to subsidize the fixed costs of putting this kind of infrastructure in place.
- WalterBright 4y ago
  I'm sure it's better to do nothing, right? No problem coming up with $37,000.