Module 4 - Sheltered Harbor

Sheltered Harbor with Dell PowerProtect Cyber Recovery

This lesson will explain what Sheltered Harbor is and guide you through the Cyber Recovery and Sheltered Harbor options.

1

Dell PowerProtect Cyber Recovery Solution is the first turnkey data vaulting solution to be endorsed by Sheltered Harbor, a non-profit, finance industry-led initiative to enhance financial sector stability and resiliency. The Dell PowerProtect Cyber Recovery Solution for Sheltered Harbor helps participants achieve compliance with data vaulting standards and certification, plan for operational resilience and recovery, and protect critical data into the next Data Decade. Sheltered Harbor has developed a process and related specification to protect specific data sets from a cyberattack, which include: •Generating data each day that represents customer identification information along with balance information. A participant is responsible for identifying this data and extracting it to the format defined in the specification. \ •Packaging this information (validation, encryption, and so on) and writing it to a secure data vault that meets the specification’s requirements. \ •Enabling recovery processes, using this data, in case of a catastrophic event.

2

When Sheltered Harbor is enabled, it will be visible under the Infrastructure menu\ (Starting Cyber Recovery release 19.15.0.2 users can enable it without Dell support). The Financial Institution "Dell Test Bank" is already added as a part of this Lab. It contains the details of a customer that we need to add after the customer registers and configures Sheltered Harbor on CR. \ You can select and click **Edit** to review the details.

Sheltered Harbor Policy

3

Create a Sheltered Harbor policy on Cyber Recovery. Click the Add button to create a Policy that corresponds to the Sheltered Harbor Mtree Replication context (SH-repl).

4

Use the following settings: **Name** = SH\ **Type** = Sheltered Harbor \ **Storage** = VaultDD \ **Financial Institution** = Dell Test Bank

5

6

**Context** = SH-repl\ **Ethernet Port** = ethV1\ **Replication Window** = 6 hours (Posts warning alert when job exceeds the window) **Enforce Replication Window** = Unchecked

7

**Retention Lock Type** = Governance \ **Other Retention Lock values** = Compliance \ \*(Retention Lock for SH Policy Type is mandatory) \ **Retention Lock Duration** = Scroll down and keep 12 hours (default minimum value). No changes required

Create A Sheltered Harbor Copy

8

For Sheltered Harbor Policy types, only one action "**Sheltered Harbor Copy**" is available which will run the following actions in the background:\ \ Sync - Synchronizes the data from the production DD to the Vault DD Verify - Verifies the input data using the manifest file Copy - Creates a fastcopy of the replication destination and places it in the CR repo Certify - Zips and encrypts the data in the CR repo copy per the Sheltered Harbor specifications Lock - Retention lock the Copy Report - On success, sends the Sheltered Harbor attestation message out of the vault to the configured email of the Financial Institution

9

Select the **SH** Policy, click on **Actions** and select "**Sheltered Harbor Copy**"

10

Click **Apply**

Jobs

11

Navigate to **Jobs** to review the Sheltered Harbor Copy progress. It will take about 15 minutes to complete the operation. The CR dashboard will show the Vault status as **Unlocked** which means there is an active replication sync happening between the Production DD and the Vault DD systems.

12

Once the Sheltered Copy Job is successful, you will see the Copy under the Policies page which means that the Sheltered Harbor data was successfully replicated to the Vault DD, certified and verified using the Sheltered Harbor standards.

Copies

13