Portal:Storage

Wikitip

New World Data Protection

Storage vendors are leading in today's data protection market with de-dup, single instancing, archiving, data dispersion and erasure technologies, as a natural extension of existing franchises. (see Compression and De-duplication key to EMCs data protection strategies) Data protection is a legacy term receiving new world definition in an effort by storage vendors to capture market interest and validate the technical offerings of their storage hardware or software product line.

However, data protection has a much broader meaning in business, law, and the information management industry in general. It is very important to understand this broader meaning and limits of the new world definition.

Here is an example of key principles of data protection (not an exhaustive list).

• Data may only be used for the specific purposes for which it was collected.
• Data must not be disclosed to other parties without the consent of the individual whom it is about, unless there are specific business, legal or regulatory requirements to share the information (for example, the prevention or detection of crime).
• Personal data should be kept no longer than necessary and must be kept up to date.
• Data protection requires that access be provided on a need-to-know basis
• Data protection requires that the use of data be audited and reported on a routine basis
• Data protection requires that unauthorized access to data be identified as a breach or violation of policy or rules
• Data protection can be achieved via mandatory, discretionary, or non-discretionary access control policies
• ....and so on

To understand the new world data protection marketplace, it's best to start with a definition of what is data protection. Although it's difficult to find consensus on an exact definition, some believe that data protection is the implementation of administrative, technical, or physical measures to guard against the unauthorized access to data. But unfortunately, the simple term "access" may not convey requirements for availability, accessibility, accessibility, identity management, and auditing and monitoring. And vendor storage platforms that tout only backup and recovery features fall short of satisfying the requirements of a more complete definition.

View Another Wikitip

Featured Case Study

Virtualization Energizes Cal State University

John Charles is the CIO of California State University, East Bay (CSUEB) and Rich Avila is Director, Server & Network Operations. In late 2007 they were both looking down the barrel of a gun. The total amount of power being used in the data center was 67KVA. The maximum power from the current plant was 75kVA. PG&E had informed them that no more power could be delivered. They would be out of power in less than six months. A new data center was planned, but would not be available for two years.

read more...

Featured How-To Note

Storage Virtualization Design and Deployment

A main impediment to storage virtualization is the lack of multiple storage vendor (heterogeneous) support within available virtualization technologies. This inhibits deployment across a data center. The only practical approach is either to implement a single vendor solution across the whole of the data center (practical only for small and some medium size data centers) or to implement virtualization in one or more of the largest storage pools within a data center.

read more...