Attachment 5: Backup and Security Data

Attachment 5: Backup and Security Data

2010 ANR Information Technology Assessment
Attachment 5: Backup and Security Datapage 1

2010 ANR IT Assessment

Attachment 5: Backup and Security Data

  1. For backing up your desktop computers please indicate what method you have:

Counties / REC’s / Campus and Statewide programs / Total / Percent
We don’t have any backup / 1 / 0 / 0 / 1 / 1%
Some computers have external hard drives used for backup / 30 / 4 / 5 / 39 / 57%
Central, automated backup system / 8 / 2 / 5 / 15 / 22%
Central backup but not automated, people store their files on it / 3 / 1 / 0 / 4 / 6%
Other / 7 / 0 / 3 / 10 / 15%

1.b. If other, please describe:

  • Backup is done through the county.
  • Varies among staff and includes flash drives, saving to computers at home, saving to external drives, and creating our own CT sites where we upload important files we can then access off-site.
  • One office has central backup.
  • We also have a tape backup server for our department.We manually replace the tape each day and the system automatically backs up.
  • County computer is on a central, automated backup system, but University computers are not on an automated back up system.
  • Each person is responsible for their own back up on CDs, flash drives, etc
  • Some individuals back up onto CD's.
  • Shared drive with an external hard drive on it with automatic backup.
  • All computers have external hard drives for back-up
  • We routinely back up with external hard drives.
  • We have both, we back up our server and one computer that has an external hard drive for that particular PC's storage (large files are maintained on this computer - graphics, presentations, PR, etc).
  • We made the decision to get an external hard drive for each computer.
  • Most computers have some kind of external backup, our TeraStation has an automated backup system, which is where most of important files are kept.
  • Users are requested to store data on central storage.
  • Automated OS-based programs (Time Machine and MS Backup) back up workstations and several servers to two central NAS units in separate locations.Main web server backs up to a tape drive.
  1. What would you like to see in the future- say the next five years- for computer backups for your unit? What is your vision for how this should be done and what would be most helpful?
  • Do not know
  • Whatever is fast, easy and reliable.
  • We have one MAC computer that has the availability of file backup via the MAC website.We would like to see something similar for PCs.
  • Just switched to the system we are on last July and it is the best.(central, automated)
  • All centralized and on a regular schedule.
  • Central backup system
  • Keep county IT service as is
  • Consistent regular back-up of desktop computers.
  • Centralized backup
  • A secure server or inline system that also offers file sharing
  • Web-based auto backup would be a great program.
  • I would like to see the office having external hard drivers for each computer so the back up can be done more efficiently.
  • Perhaps off-site on-line backups
  • Office wide backup system
  • Something efficient and automatic and not sitting on another person's old computer. Need a system for laptops.
  • I am open to suggestions
  • External hard drives AND off-site internet or UC based
  • Automatic back-up similar to the system that is established in Oakland ANR. It backs up to the server and all one has to do is click.
  • Backup at a central location on line.
  • A better system of computer back up.Currently we use individual external hard drives.Some in the office know how to do this well and others not so well.Offsite backup would be useful, but our upload speeds are too slow.
  • Off-site backup would be ideal.
  • Have externals on most desktops - will need to replace and deploy more to more users. May consider centralized approach - need to take into consideration laptop users
  • Something more than we have
  • We currently utilize external hard drives.These have not proved to be the most reliable.
  • Cloud backups available through the University
  • Automated remote backup
  • We'd like to use an offsite service like carbonite.
  • Automated system for all computers in unit.This might be done through an ANR software purchase for this application.
  • It would be nice to have Communications Services offer an inexpensive external hard drives.
  • Don’t know
  • Automatic back up of selected applications/fields on a central system would be great. Currently individuals back up as needed for each individual computer but I'm not sure we recognize the need to have the information available to others in the unit.
  • We have had little or no help with this and feel it is seriously lacking at our location.We could use advice on useful approaches when at a location with little on-site staff with time or training in computer support, devices that are typically independent, stand-alone andnot on a network/server.What type of backup is best suited to stand-alone PC's, with that situation not likely to change soon?
  • As much backup space as possible.(Blaine would be the one who is aware of what should be done with our current backup server needs.) Current product releases for the backup software.
  • Additional disk storage andother off-site storage capabilities. Additional Internet bandwidth for off-site storage.
  • So far, the system has worked using separate backup drives.
  • Need consistent backup plan.
  • Move main webserver backup to its own NAS unit.
  1. About how many computer security incidents did you have in the past year (e.g. computers infected with viruses or malware, stolen laptops. etc.)?

Counties / RECs / Campus and statewide programs / Total
No. units responding / 36 / 7 / 3 / 46
Total incidents / 94 / 8 / 8 / 110
Ave incidents/unit / 2.6 / 1.1 / 2.7 / 2.4

3.a. Approximately how many hours did someone in your unit spend dealing with these security incidents?

Counties / RECs / Campus and statewide programs / Total
No. units responding / 22 / 4 / 5 / 31
Total hours / 222 / 6 / 54 / 282
Ave hours/unit / 10 / 1.5 / 10 / 9.1

This would indicate then that people are spending about 3 hours/incident of staff time dealing with it.

3.b. Did you hire an outside firm or consultant to fix the problems caused by the security incident(s)?

Counties / RECs / Campus and statewide programs / Total
yes / 7 / 1 / 0 / 8
no / 29 / 3 / 6 / 38
Percent yes

3.c. If so, what did it cost you?

Counties / RECs / Campus and statewide programs / Total
No. units responding / 6 / 1 / 0 / 7
Total cost / $3,200 / $150 / 0 / $3,350
Ave cost/unit / $533 / $150 / 0 / $479

3.d. Further breakdown of security incidents

Units part of the ANR Computer Security Project / Units not part of it / Offices on county networks
No. units responding / 17 / 40 / 7
Total incidents / 29 / 84 / 10
Ave incidents/unit / 1.7 / 2.1 / 1.4
  1. What would you like to see in the future- say the next five years- for computer security for your office? What is your vision for how this should be done and what would be most helpful?
  • Multiple AV products.Sometimes Sophos doesn't work on a particular machine and sometimes there are other products out that are better for the system, easier to use, and protect better than Sophos.
  • Our largest problems are unmanaged personal computers being plugged into our internal network and laptops being/getting infected off site.
  • Really visioning here! Microsoft to develop secure software that doesn't require constant tweaking!!!
  • Continued vigilance and maintenance for workstation, server, and network security.Continued use of automated building security system.Making sure productivity is not significantly reduced by security burdens. Continued upgrading of campus facilities related to keeping local systems secure.
  • Whatever is fast, easy and reliable.
  • (FYI - we spent 6 hours of UC IT support on a virus issue with no resolution.It had to be taken in and the hard drive wiped clean.)Funding for resolving these issues when they occur.We currently have to use Various Donor or Local Income Accounts.
  • Very limited problems.
  • I would like to see nothing.In other words I want security to work so that we can do our work.
  • Support through ANR for that service
  • Continue with communications via e-mail when there are security risks.
  • I have some advisors running SpyBot, and other such anti-malware programs in addition to UC provided Sophos.A good comprehensive listing of approved programs in this area would be nice, even with training on proper use.
  • Better comprehensive protection from viruses, trojans and malware. Better programs to keep computer running trouble-free outside of normal virus protection.
  • Need a designated IT person who does not cost us money out of grant funding.
  • Continued alerts of upcoming viruses.
  • The current support from computer services has been excellent.It includes virus software, on the phone training and advice, and routine alerts.
  • These issues very important ---on work productivity and budget constraints
  • Firewall protection the strips malware, worms and prevents malware download by ignorant PC users.
  • Would like something simpler than the present UC desktop security system.
  • Remote or physical visit to check computers for problems.
  • We would continue to need access to someone on the phone through campus who could help us via phone connection.We are so far from the campus that few UC support people ever come to our location.