Ensuring regulatory compliance and cyber resilience

United Kingdom, Dec 16, 2024

The Challenge 

With the introduction of the European Central Bank’s (ECB) Digital Operational Resilience Act (DORA), our customer, a prominent European Bank, needed to make changes to the way it stores data to keep in compliance with the regulations. They needed to:

  • Produce an immutable copy of it’s data
  • Restore that same data within a two-hour window 

Logicalis were approached to architect and implement a solution that would meet the DORA regulations, as we had maintained a good relationship with the customer from installing the IBM Mainframe they currently use and wanted to take advantage of the system they already had.

 

The Solution

Logicalis worked directly with IBM to decide on the best approach. After consultation, we suggested a packaged Cyber Vault solution built around IBM’s storage Safeguard Copy functionality. This IBM Cyber Vault uses Safeguarded Copy which is a protection mechanism that supports the ability to create cyber-resilient, point-in-time copies of volumes of data.

This solution provided the immutable copy running on separate DS8K storage and the Recovery Expert SW which would ensure the bank could meet the recovery time, and secure data to prevent it from being compromised, either accidentally or deliberately. We decided on this approach as the functionality is unique to IBM, and a differentiator that no other technology on the market can meet or deliver.

Our experience and relationship with IBM meant that we could deliver Cyber Vault Assets to ensure the Cyber Vault used best practice, which resulted in a seamless implementation.

 

The Result 

Thanks to these changes, the bank not only has measures to safeguard its data against cyber threats, but it also maintains immutable copies of its data. If there were a loss of any data, the bank would be able to restore this data within a two-hour timeframe. This quick recovery capability is not only a key factor in minimising downtime in the event of an attack, but it also ensures the bank is compliant with the ECB DORA.

Download the pdf version of this case study here!

Topic

Related Insights