This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
H7. Plan for the worst
Description: Disaster can always strike. The digital world is more, rather than less, likely to encounter a disaster. From hardware failure, to user mistakes (did I really just delete that???), to attacks by hackers, your data and systems will encounter a disaster, it’s just a matter of time. Just as you would be sure to have a spare tire in your car, or candles in your house in case of a power outage, be sure to take proper step to be able to react in the case of a “digital disaster.”
Threats: Disasters can be intentional, in the form or a hacker exploiting your data, accounts or systems, accidental, such as accidentally deleting valuable data, or acts of nature, such as flooding, fires, or lightning strikes (causing a surge in electricity which can destroy unprotected electronics).
Impact: Disaster can result in the loss and unavailability of important data, access to critical online accounts, and the inability to connect to the Internet.
Recommendations:
Consumers should focus on:
1. Backup important data, including passwords and encryption keys, and store in a safe place, offsite 2. Configure your devices to be secure, for example, to use disk encryption, in the event they are stolen or lost 3. Use surge protectors
Tech-savvy users should also:
1. Use online services and storage to backup data. Encrypt sensitive data 2. Print off account recovery sheets (i.e. Google 10 passwords) and store it offsite at a friend's place or at the bank 3. Have backup Internet access
Example: Ransomware, which encrypts your hard drive and demands payment for the encryption key loses its power when you have a recent backup.