{"id":9806,"date":"2009-07-30T15:29:00","date_gmt":"1999-11-29T20:00:00","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=9806"},"modified":"2009-07-30T15:29:00","modified_gmt":"1999-11-29T20:00:00","slug":"doing-compliance-the-wrong-way","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=9806","title":{"rendered":"Doing Compliance The Wrong Way"},"content":{"rendered":"

ENN reported<\/a> yesterday that \u201cThe Irish Times reports that Wicklow County Council has started to exam its 300 computers for references to the Whitestown illegal landfill, in order to comply with a request from the High Court\u201d.<\/em><\/p>\n

300 computers?\u00a0 Does Wicklow County Council have that many file servers?\u00a0 Nah, I\u2019m just joking.\u00a0 These guys obviously have no understanding of how to control over the desktop\/laptop network so they\u2019ve got a mess.\u00a0 It could take them months to find related data; heck they might never live up to their obligations.<\/p>\n

Here\u2019s how they should have approached this:<\/p>\n

    \n
  1. Desktops and laptops should be locked down with no local admin access for users.\u00a0 Dodgy apps should be \u201cshimmed\u201d.<\/li>\n
  2. Group policy should be employed to prevent access to the local drive on the laptop\/PC.<\/li>\n
  3. Use policy (either Group Policy or 3rd party) to disable use of removable media.\u00a0 You don\u2019t want people trying to bypass compliance systems by usin USB drives to store dodgy information.<\/li>\n
  4. Forget roaming profiles.\u00a0 Use Windows Server 2008 folder redirection to redirect all the possible storage locations you would need on a PC, e.g. My Documents, Application Data, etc, to the user\u2019s home directory on a file server.<\/li>\n
  5. Configure offline access for the user\u2019s home directory.\u00a0 That means My Document, etc, will be available to users when the file server isn\u2019t, e.g. roaming laptop users.<\/li>\n
  6. Set up a file server data retention system.\u00a0 There\u2019s lots of choices here.\u00a0 If you\u2019ve got a golden budget then something like a SAN based solution will work.\u00a0 Normal backups don\u2019t work \u2013 backing up a file once a day isn\u2019t retention.\u00a0 There\u2019s a 24 hour window where data can exist and be deleted.\u00a0 Maybe look at MS DPM, e.g. DPM-2-DPM-4-DR with a long retention period.\u00a0 Or have a look at Iron Mountain LiveVault<\/a> for incremental block level backups every 15 minutes.\u00a0 With LiveVault there\u2019s a almost certain change you\u2019ll backup anything that ever gets near the file server and you can set up a retention period for your compliance requirements, e.g. 7 or 10 years.<\/li>\n
  7. You\u2019ll need to set up a compliance solution for your mail server too.\u00a0 Like with file servers, a daily backup is not a retention system for compliance.\u00a0 Mails easily come and go in a 24 hour window.\u00a0 Again, there\u2019s nice solutions from the likes of CommVault.\u00a0 And there\u2019s the DPM-2-DPM-4-DR and Iron Mountain LiveVault<\/a>.<\/li>\n<\/ol>\n

    What\u2019s the result?\u00a0 If the High Court demands you search for files then it\u2019s a lot easier.\u00a0 You only have one or two places to search.\u00a0 All you\u2019ve got to do is search those locations.\u00a0 Forget about searching PC\u2019s because your users don\u2019t have the rights to write there.<\/p>\n

    del.icio.us Tags: Windows Server<\/a>,Compliance<\/a><\/div>\n<\/p>\n

    Technorati Tags: Windows Server<\/a>,Compliance<\/a><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"

    ENN reported yesterday that \u201cThe Irish Times reports that Wicklow County Council has started to exam its 300 computers for references to the Whitestown illegal landfill, in order to comply with a request from the High Court\u201d. 300 computers?\u00a0 Does Wicklow County Council have that many file servers?\u00a0 Nah, I\u2019m just joking.\u00a0 These guys obviously … Continue reading “Doing Compliance The Wrong Way”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[37],"tags":[],"class_list":["post-9806","post","type-post","status-publish","format-standard","hentry","category-security"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t