3.4.5 Backups & Power

Availability ensures that systems and data bridge the gap between security and functionality by remaining accessible to authorized users whenever they are required.

High Availability and Data Redundancy Maintaining the "A" in the CIA Triad requires duplicating critical resources to prevent single points of failure. - Backups: The primary method for data recovery. Effective strategy involves balancing the frequency of backups against the resources available. - Snapshots: Point-in-the-time "images" of a system or virtual machine. These allow for near-instant restoration to a specific state, which is vital before performing risky updates or configuration changes. - Replication: The process of copying data in real-time or near-real-time to a secondary location (site or server). This ensures that if the primary system fails, a synchronized copy is ready to take over.

Power Management and Continuity Electrical disruptions are a major threat to availability. Organizations use layered defenses to maintain uptime. - UPS (Uninterruptible Power Supply): A battery-based system that provides immediate, short-term power during a blackout or surge. Its primary role is to bridge the gap until a generator starts or to allow for a graceful system shutdown to prevent data corruption. - Generators: Long-term power solutions fueled by diesel, propane, or natural gas. These provide extended sustainability during prolonged outages once the UPS transition is complete. - Power Distribution Units (PDUs): Advanced power strips used in data centers to manage and distribute electricity to multiple servers, often featuring monitoring capabilities to prevent overloads.

Secure Administration and Access Effective availability requires managing who can modify these systems without compromising security. - Role-Based Access Control (RBAC): Assigning permissions based on predefined roles (e.g., "Backup Operator" or "Site Manager") rather than individual users. This is non-discretionary and typically managed by high-level administrators to ensure consistency. - Group-Based Management: Streamlining authorization by placing similar users into collections to lower administrative overhead. - Web-of-Trust: A decentralized model used by PGP/GPG where individuals validate each other's identities. While useful for small groups, it is not scalable for large-scale availability and lacks a central issuing authority.

Quick Recall - Snapshots: Best for quick "undo" operations on VMs. - Replication: Best for site-to-site redundancy and disaster recovery. - UPS vs. Generator: UPS is for minutes (batteries); Generators are for hours/days (fuel). - Graceful Shutdown: The goal of a UPS if long-term power isn't available. - Redundancy: The core concept behind preventing single points of failure.