Search <book_title>...

NetBackup IT Analytics Help

Last Published: 2023-03-01

Product(s): NetBackup IT Analytics (11.0)

Ransomware Risk Assessment Dashboard

This out of the box dashboard highlights the risk of under-protected assets which if exposed to a ransomware threat may become unavailable and may even incur financial loss to your enterprise. It also highlights any presence of files with well-known ransomware extensions across your environment. This dashboard contains multiple reports to highlight and visualize the risk in your environment. This enables you to ascertain your readiness in terms of data protection in the event of a Ransomware infection. The dashboard is divided up into sections and each section represents a report.

Risk Mitigation Analysis

This report in the dashboard describes the risk associated with several key aspects of your protection environment. The report lists servers which are divided across risk categories, such as:

Sources with No Recent Backups: Lists all servers which have not been backed up in the recent past.
Sources with No Recent Backups: Lists all servers which have not been backed up in the recent past.
Suspect Backup by Job Size: Indicates servers whose backup job resulted in a very small size backup which indicates some misconfiguration.
Sources Consecutive Failure: Describes the risk of backup jobs failing for certain servers and that means some servers may not be adequately protected.
Compliance RTO RPO: Assists in computing RTO (Recovery Time Objectives) and RPO (Recovery Point Objectives) for backups using the time of the last full backup and then adding the time it takes to apply any incrementals.

You can click on the donut section of your choice in the chart to get a detailed view of the servers and sources under consideration for that selection. This drill down capability provides deeper insight and helps identify the sources of risk quickly and easily. To choose your categories to display, please hover your mouse over the top right part of the report to display icons that let you "edit scope". These rules and categories are also described in Admin > Solutions > Risk Mitigation, where you can double-click on any rule to customize it for your requirements. You can choose to view multiple categories at the same time or select the categories by clicking on the category legend without changing the scope of the report for quick view and analyze situations.

Risk Mitigation Trend

This report describes the same risk categories spread across time. This report gives you a sense of how your protection risk has been changing over time. This helps you create a baseline and work towards keeping your risk levels per category below this baseline.

Alerts Summary Report

This report describes specific instances when things have not worked as expected with respect to data protection. A NetBackup Master server connection failure, out of storage condition on the NetBackup Master server or an incomplete backup job may indicate risk in the environment that needs addressing. The alert summary chart can be used to drill down on any of the alert types to get deeper insight into the source of alert. This helps in mitigating any potential risk in the environment and consequently reducing a potential negative impact of a Ransomware infection.

Alert Trend Report

It describes the alert occurrences over time. This provides a good way of determining a baseline and staying below the baseline as a goal to mitigate any risk.

Ransomware File Types

This report describes the risk associated with the presence of files across the enterprise which have well known ransomware extension names. This helps to zoom in on servers which have files with potential ransomware infection. This visibility is crucial in identifying the spread of ransomware infection across the environment. This report provides the summary view of number of the such file extensions found. You can click on the export icon to download a CSV file which would contain a list of all file paths along with their server locations to help drill down into the source of the infection.

You can edit the report scope by hovering over the top right hand corner of the report and choosing the Edit Scope option and choosing which Alert category to see in the report. The alerts can be configured in detail using the top level Alerts tab.

Job Anomalies Count

This chart displays the count of anomalies detected in the host group by it data protection tool. The chart drills down to the Anomalies Summary report that contains additional details about the hosts and the anomaly score.

See Anomalies Summary.

More Information

Risk Mitigation Analysis

Risk Mitigation Trend