Edit RSK-001

A ransomware infection that reaches the hosting platform would encrypt the virtual machines of many customers at the same time. The platform team manages the clusters in both data centre suites from one management network, which is the path an attacker would use.

Measures

Veeam copies go every night to the Harbourlight offsite storage, and the platform team restores a sample from there every six months. Endpoint detection runs on all management servers, and the management network is kept apart from the customer networks.