1
00:00:00,120 --> 00:00:01,410
In this section of the course,

2
00:00:01,410 --> 00:00:04,530
we're going to be focused on cyber resilience and redundancy.

3
00:00:04,530 --> 00:00:06,900
Now, cyber resilience refers to the entity's ability

4
00:00:06,900 --> 00:00:09,240
to continuously deliver the intended outcome,

5
00:00:09,240 --> 00:00:11,310
despite adverse cyber events.

6
00:00:11,310 --> 00:00:12,570
Redundancy, on the other hand,

7
00:00:12,570 --> 00:00:15,510
involves having additional systems, equipment, or processes,

8
00:00:15,510 --> 00:00:17,220
to ensure the continued functionality,

9
00:00:17,220 --> 00:00:19,470
if the primary ones are going to fail.

10
00:00:19,470 --> 00:00:21,030
Now, in the realm of cybersecurity,

11
00:00:21,030 --> 00:00:24,270
achieving a high level of cyber resilience is critical.

12
00:00:24,270 --> 00:00:26,730
This ensures that organizations can swiftly recover

13
00:00:26,730 --> 00:00:28,560
and continue their business operations,

14
00:00:28,560 --> 00:00:31,530
even in the face of a cyber attack or technical failure.

15
00:00:31,530 --> 00:00:33,780
Now, redundancy plays a really big role in this

16
00:00:33,780 --> 00:00:35,490
by having backup systems in place.

17
00:00:35,490 --> 00:00:37,230
And the chances of a total system failure

18
00:00:37,230 --> 00:00:38,880
can then significantly be reduced

19
00:00:38,880 --> 00:00:40,950
because you have backups that you can turn over to,

20
00:00:40,950 --> 00:00:43,047
in the case that the primary system fails.

21
00:00:43,047 --> 00:00:44,940
Now, in this section of the course,

22
00:00:44,940 --> 00:00:47,010
we're going to be working inside of domain three,

23
00:00:47,010 --> 00:00:50,220
and we'll have a singular focus on covering objective 3.4.

24
00:00:50,220 --> 00:00:52,830
Objective 3.4 states that you must be able to explain

25
00:00:52,830 --> 00:00:54,810
the importance of resilience and recovery

26
00:00:54,810 --> 00:00:56,610
in security architecture.

27
00:00:56,610 --> 00:00:59,130
Now, first, we're going to be looking at high availability.

28
00:00:59,130 --> 00:01:00,390
We'll discuss the importance

29
00:01:00,390 --> 00:01:02,160
of load balancing versus clustering,

30
00:01:02,160 --> 00:01:04,410
and we'll dive into the significance of redundancy,

31
00:01:04,410 --> 00:01:07,350
for elements like power, supplies, connections, servers,

32
00:01:07,350 --> 00:01:10,140
services, and providers, as well as exploring the benefits

33
00:01:10,140 --> 00:01:12,210
of adopting multi-cloud systems.

34
00:01:12,210 --> 00:01:14,075
Next, we'll cover data redundancy.

35
00:01:14,075 --> 00:01:16,290
Now, data redundancy is going to be achieved

36
00:01:16,290 --> 00:01:18,000
by having redundant storage devices

37
00:01:18,000 --> 00:01:20,070
all working together to protect your data.

38
00:01:20,070 --> 00:01:22,770
So we're going to be looking at different types of RAID arrays,

39
00:01:22,770 --> 00:01:24,270
as we're going to use those a lot

40
00:01:24,270 --> 00:01:26,730
inside our enterprise systems and networks.

41
00:01:26,730 --> 00:01:27,960
Then we're going to take a look

42
00:01:27,960 --> 00:01:29,580
at how you can configure a RAID.

43
00:01:29,580 --> 00:01:31,710
Here, we're going to be conducting a quick demonstration

44
00:01:31,710 --> 00:01:33,150
to show you how you can separate

45
00:01:33,150 --> 00:01:35,010
for your servers and systems.

46
00:01:35,010 --> 00:01:37,560
After that, we're going to look at capacity planning.

47
00:01:37,560 --> 00:01:38,700
We're going to be discussing the importance

48
00:01:38,700 --> 00:01:40,710
of capacity planning in terms of people,

49
00:01:40,710 --> 00:01:42,510
technology, and infrastructure,

50
00:01:42,510 --> 00:01:45,090
while emphasizing their ability to scale up efficiently

51
00:01:45,090 --> 00:01:47,010
during periods of peak demand.

52
00:01:47,010 --> 00:01:50,160
Next, we're going to take a look at powering our data centers.

53
00:01:50,160 --> 00:01:52,230
Now here we're going to be focused on essential components

54
00:01:52,230 --> 00:01:55,290
like generators, UPSs, line conditioners,

55
00:01:55,290 --> 00:01:56,670
power distribution centers,

56
00:01:56,670 --> 00:01:57,840
and other things like that,

57
00:01:57,840 --> 00:01:59,760
that help us ensure a constant power supply

58
00:01:59,760 --> 00:02:02,520
is being maintained to all of our data centers.

59
00:02:02,520 --> 00:02:04,366
Then we're going to cover data backups.

60
00:02:04,366 --> 00:02:06,750
Here, our focus is going to be on understanding

61
00:02:06,750 --> 00:02:09,660
the significance of both onsite and offsite backups,

62
00:02:09,660 --> 00:02:11,850
as well as the use of encryption, snapshots,

63
00:02:11,850 --> 00:02:13,980
recovery, replication, and journaling

64
00:02:13,980 --> 00:02:16,320
to maintain the security of all of our data.

65
00:02:16,320 --> 00:02:19,650
After that, we'll discuss a continuity of operations plan.

66
00:02:19,650 --> 00:02:21,270
Now the importance of a business continuity

67
00:02:21,270 --> 00:02:24,780
and disaster recovery plan, or BCDR, as it's usually called,

68
00:02:24,780 --> 00:02:26,400
will focus on the significance of ensuring

69
00:02:26,400 --> 00:02:27,780
smooth business operations

70
00:02:27,780 --> 00:02:30,810
during different kinds of unforeseen events or incidents.

71
00:02:30,810 --> 00:02:31,890
Next, we're going to look

72
00:02:31,890 --> 00:02:33,810
at some redundant site considerations.

73
00:02:33,810 --> 00:02:36,480
We'll be exploring backup site options like hot sites,

74
00:02:36,480 --> 00:02:38,040
cold sites, and warm sites,

75
00:02:38,040 --> 00:02:39,990
as well as looking at geographic dispersion,

76
00:02:39,990 --> 00:02:41,250
virtual sites in the cloud,

77
00:02:41,250 --> 00:02:42,540
and platform diversity,

78
00:02:42,540 --> 00:02:45,060
that can all help to ensure our systems and their data

79
00:02:45,060 --> 00:02:47,940
remain available to our end users at all times.

80
00:02:47,940 --> 00:02:49,560
Then we're going to discuss methods used

81
00:02:49,560 --> 00:02:51,810
to conduct resilience and recovery testing.

82
00:02:51,810 --> 00:02:54,150
This includes things like tabletop exercises,

83
00:02:54,150 --> 00:02:57,390
failover techniques, simulation and parallel processing,

84
00:02:57,390 --> 00:02:59,610
and each of these will support different use cases

85
00:02:59,610 --> 00:03:01,290
within our organizations.

86
00:03:01,290 --> 00:03:02,910
Finally, we're going to take a short quiz

87
00:03:02,910 --> 00:03:04,770
to see what we learned during this section of the course

88
00:03:04,770 --> 00:03:06,690
and review each of those quiz questions fully,

89
00:03:06,690 --> 00:03:09,120
to ensure you can explain why each answer was right.

90
00:03:09,120 --> 00:03:10,530
Now let's dive into our coverage

91
00:03:10,530 --> 00:03:12,090
of cyber resilience and redundancy

92
00:03:12,090 --> 00:03:13,590
in this section of the course.