We are attempting to build a secure infrastructure for a start-up company we're running. We have purchased almost all the stuff we need to get the company up and running. For some services, we found it makes more sense to outsource.
We use the Cloud Solutions from Microsoft (CSP) instead of hosting our own Windows, Active Directory, and Exchange server. This is because of price. If we had the money, we'd be running a hybrid setup. We have a 22-core CPU for the main server, and with Microsoft moving to core-based licenses, this adds up quickly for on-premise software licenses.
We use a mix of Linux, Windows, and Android clients.
We are at the point where we're starting to look into how to securely store some of the data. Certain stuff, we keep hard copies. There's data we want to access via the network though. We have a RAID5 array built out of 12Gbps SAS hdd's.
We're looking for solutions for archival purposes. Originally, we were thinking a tape library or NAS backup solution, but one of my account executives mentioned something that made sense to me. With a reputable company that specializes in secure data storage, they can devote the resources that we cannot currently devote, to monitor the servers that the data is stored on.
When I say archival, I am talking about data that we will occasionally need to access, such as invoices, quotes, contracts, license agreements, but data we won't be accessing on a regular basis.
So I'm reaching out to the BadCaps community to help me build a list of the pro's and con's with the various backup solutions.
What I've learned is on-site can be pricey. We don't have a second facility for off-site backups. If something were to happen here, we'd lose the data. By outsourcing for secure data storage, we could make sure our data is stored at two seperate locations. We would go for a reputable company, who has the resources to watch server logs 24/7 and train their employees on the various types of attacks, etc. I phished my other two fellow workers and my wife failed all three of the phishing tests. They were tests found in the wild and targeted directly towards the individual workers.
So a con would be with outsourcing, we'd have to pay a monthly fee, but initiale price would probably be much lower than on-site. It would more than likely be more secured, but might be opened to all who have the password (I don't know if we can whitelist IPs for access but if we could, that should solve that issue).
Can anyone else think of any pro's or con's for either options? On-premise storage vs outsourcing? Thanks!
We use the Cloud Solutions from Microsoft (CSP) instead of hosting our own Windows, Active Directory, and Exchange server. This is because of price. If we had the money, we'd be running a hybrid setup. We have a 22-core CPU for the main server, and with Microsoft moving to core-based licenses, this adds up quickly for on-premise software licenses.
We use a mix of Linux, Windows, and Android clients.
We are at the point where we're starting to look into how to securely store some of the data. Certain stuff, we keep hard copies. There's data we want to access via the network though. We have a RAID5 array built out of 12Gbps SAS hdd's.
We're looking for solutions for archival purposes. Originally, we were thinking a tape library or NAS backup solution, but one of my account executives mentioned something that made sense to me. With a reputable company that specializes in secure data storage, they can devote the resources that we cannot currently devote, to monitor the servers that the data is stored on.
When I say archival, I am talking about data that we will occasionally need to access, such as invoices, quotes, contracts, license agreements, but data we won't be accessing on a regular basis.
So I'm reaching out to the BadCaps community to help me build a list of the pro's and con's with the various backup solutions.
What I've learned is on-site can be pricey. We don't have a second facility for off-site backups. If something were to happen here, we'd lose the data. By outsourcing for secure data storage, we could make sure our data is stored at two seperate locations. We would go for a reputable company, who has the resources to watch server logs 24/7 and train their employees on the various types of attacks, etc. I phished my other two fellow workers and my wife failed all three of the phishing tests. They were tests found in the wild and targeted directly towards the individual workers.
So a con would be with outsourcing, we'd have to pay a monthly fee, but initiale price would probably be much lower than on-site. It would more than likely be more secured, but might be opened to all who have the password (I don't know if we can whitelist IPs for access but if we could, that should solve that issue).
Can anyone else think of any pro's or con's for either options? On-premise storage vs outsourcing? Thanks!
Comment