Module 4 - Sheltered Harbor

This module provides an introduction to Sheltered Harbor and its integration with Cyber Recovery.

Sheltered Harbor with Dell PowerProtect Cyber Recovery

This lesson will explain what Sheltered Harbor is and guide you through the Cyber Recovery and Sheltered Harbor options.

Dell PowerProtect Cyber Recovery Solution is the first turnkey data vaulting solution to be endorsed by Sheltered Harbor, a non-profit, finance industry-led initiative to enhance financial sector stability and resiliency. The Dell PowerProtect Cyber Recovery Solution for Sheltered Harbor helps participants achieve compliance with data vaulting standards and certification, plan for operational resilience and recovery, and protect critical data into the next Data Decade. Sheltered Harbor has developed a process and related specification to protect specific data sets from a cyberattack, which include: •Generating data each day that represents customer identification information along with balance information. A participant is responsible for identifying this data and extracting it to the format defined in the specification. \ •Packaging this information (validation, encryption, and so on) and writing it to a secure data vault that meets the specification’s requirements. \ •Enabling recovery processes, using this data, in case of a catastrophic event.

When Sheltered Harbor is enabled, it will be visible under the Infrastructure menu\ (Starting Cyber Recovery release 19.15.0.2 users can enable it without Dell support). The Financial Institution "Dell Test Bank" is already added as a part of this Lab. It contains the details of a customer that we need to add after the customer registers and configures Sheltered Harbor on CR. \ You can select and click **Edit** to review the details.

Sheltered Harbor Policy

Create a Sheltered Harbor policy on Cyber Recovery. Click the Add button to create a Policy that corresponds to the Sheltered Harbor Mtree Replication context (SH-repl).

Use the following settings: **Name** = SH\ **Type** = Sheltered Harbor \ **Storage** = VaultDD \ **Financial Institution** = Dell Test Bank

**Context** = SH-repl\ **Ethernet Port** = ethV1\ **Replication Window** = 6 hours (Posts warning alert when job exceeds the window) **Enforce Replication Window** = Unchecked

**Retention Lock Type** = Governance \ **Other Retention Lock values** = Compliance \ \*(Retention Lock for SH Policy Type is mandatory) \ **Retention Lock Duration** = Scroll down and keep 12 hours (default minimum value). No changes required

Create A Sheltered Harbor Copy

For Sheltered Harbor Policy types, only one action "**Sheltered Harbor Copy**" is available which will run the following actions in the background:\ \ **Sync** - Synchronizes the data from the production DD to the Vault DD **Verify** - Verifies the input data using the manifest file **Copy** - Creates a fastcopy of the replication destination and places it in the CR repo **Certify** - Zips and encrypts the data in the CR repo copy per the Sheltered Harbor specifications **Lock** - Retention lock the Copy **Report** - On success, sends the Sheltered Harbor attestation message out of the vault to the configured email of the Financial Institution

Select the **SH** Policy, click on **Actions** and select "**Sheltered Harbor Copy**"

Click **Apply**

Jobs

Navigate to **Jobs** to review the Sheltered Harbor Copy progress. It will take about 15 minutes to complete the operation. The CR dashboard will show the Vault status as **Unlocked** which means there is an active replication sync happening between the Production DD and the Vault DD systems.

Once the Sheltered Copy Job is successful, you will see the Copy under the Policies page which means that the Sheltered Harbor data was successfully replicated to the Vault DD, certified and verified using the Sheltered Harbor standards.

Copies

The **Policies --> Copies** tab will display the successful copy created by the **Sheltered Harbor Copy** action.

Email Notification after Successful Sheltered Harbor Processing

Failed Sheltered Harbor Processing

Delete some data from Sheltered Harbor folder and try to run Sheltered Harbor Copy again.

Open the CIFS share "**SH**" created on the Production DD "**ddveprod.demo.local**" using **Run** on desktop

Select and delete the first manifest file manually

Ensure manifest File .mnf is deleted

Run Another Sheltered Harbor Copy for the SH Policy

Navigate to **Policies**, select the **SH** policy, click on **Actions** and select **Sheltered Harbor Copy**

Navigate to **Jobs** to review the Sheltered Harbor Copy progress. It will take about 15 minutes to complete the operation

Failed Sheltered Harbor Copy Job

Because we deleted the manifest file and tried to run a Sheltered Harbor Copy, SH processing failed to validate the data and the Copy was not generated.

Recovery Process from the Sheltered Harbor Copy

The recovery process requires to setup a separate recovery host with SH recovery scripts to recover the data from the Sheltered Harbor Copy. Sheltered Harbor manages the monitoring log utility, which accepts and records the daily attestation messages. Sheltered Harbor monitors these attestation messages, notes noncompliance and escalates with non-compliant participants, and provides compliance statistics to the financial industry.

Conclusion

Dell Technologies is the first technology solution provider to join the Sheltered Harbor Alliance Partner Program. The solution is based on the Dell PowerProtect Cyber Recovery solution. To comply with the Sheltered Harbor Specification, the Cyber Recovery vault architecture is being extended to perform the Archive Generation and Secure Repository processes. Extracted Sheltered Harbor data is saved in production, then securely replicated via a logical, air-gapped, dedicated connection to the vaulted environment where the remaining steps, such as retention locking, are performed. By creating a dedicated, isolated environment, physically separated from corporate networks and backup systems, critical data sets, which Sheltered Harbor participants are required to protect, are available in standardized format so that basic banking services can be quickly resumed for customers. Deployment can be measured in a matter of weeks instead of months, and with a certainty of compliance with the Sheltered Harbor Specification.

Summary

Dell PowerProtect Cyber Recovery for Sheltered Harbor is being developed to provide participating institutions a fast, cost-effective and efficient alternative to each institution building a one-off, proprietary vault in order to maintain compliance with the Sheltered Harbor Specification. Banks, credit unions and brokerage firms choosing to implement the Sheltered Harbor standard will soon be able to turn to Dell Technologies for a fully supported turnkey solution. With the added benefit of leveraging a mature vault-based technology, Sheltered Harbor participants choosing PowerProtect Cyber Recovery for Sheltered Harbor can confidently meet their immediate deployment needs, as well as establish a foothold for their future data vaulting requirements. A participating institution has a path to survival and public confidence in the U.S. financial system is maintained.