In this recording, Chris talks with David Ngo (CTO for Metallic) and Indu Peddibhotla (VP Products at Commvault) on how Commvault and the Metallic platform implement secure SaaS data protection. Customers depend on Metallic to recover from ransomware and other data loss scenarios. This puts more pressure on SaaS backup to be secure, protected and impregnable from assault. Commvault uses a set of design principles in its approach with Metallic that include; Security built-in, Certification, Air-gapped security, audit trails, multi-factor authentication, zero-trust methodology and early threat detection to achieve secure status.

In the conversation, David and Indu take us through exactly what each of these concepts means and how they are used to develop a secure SaaS data protection solution. Naturally, some of the processes are trade secrets, but we can see from certifications including FedRAMP, FIPS 140-02, CJIS compliance, GDPR compliance, HIPAA and more, that the service is secured to a high degree of competence.

During the conversation, we reference Cloud Field Day 13 – here’s the link to Commvault’s presentations – https://techfieldday.com/appearance/metallic-presents-at-cloud-field-day-13/

We also quote the great Donald Rumsfeld about “known unknowns” – https://en.wikipedia.org/wiki/There_are_unknown_unknowns

Here are two previous pieces of content on vendor guarantees:

Here’s a link to Metallic Recovery Reserve, mentioned by Indu – https://metallic.io/metallic-cloud-storage

Here’s the link to Metallic ThreatWise – https://metallic.io/threatwise-cyber-deception

Finally, here’s a link to the Trust Centre mentioned by Indu – https://metallic.io/trust

Elapsed Time: 00:31:26

Copyright (c) 2023 Unpacked Network. Post #c3po. Do not reproduce without permission, in part, or whole.