This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

H7. Plan for the worst

From OWASP
Jump to: navigation, search


Description: Disaster can always strike. The digital world is more, rather than less, likely to encounter a disaster. From hardware failure, to user mistakes (did I really just delete that???), to attacks by hackers, your data and systems will encounter a disaster, it’s just a matter of time. Just as you would be sure to have a spare tire in your car, or candles in your house in case of a power outage, be sure to take proper step to be able to react in the case of a “digital disaster.”

Threats: Disasters can be intentional, in the form or a hacker exploiting your data, accounts or systems, accidental, such as accidentally deleting valuable data, or acts of nature, such as flooding, fires, or lightning strikes (causing a surge in electricity which can destroy unprotected electronics).

Impact: Disaster can result in the loss and unavailability of important data, access to critical online accounts, and the inability to connect to the Internet.

Recommendations:

Consumers should focus on:

1. Backup important data, including passwords and encryption keys, and store in a safe place, offsite
2. Configure your devices to be secure, for example, to use disk encryption, in the event they are stolen or lost
3. Use surge protectors

Tech-savvy users should also:

1. Use online services and storage to backup data. Encrypt sensitive data
2. Print off account recovery sheets (i.e. Google 10 passwords) and store it offsite at a friend's place or at the bank
3. Have backup Internet access

Example: Ransomware, which encrypts your hard drive and demands payment for the encryption key loses its power when you have a recent backup.