Quote - An easy first step is to become part your industry threat sharing community, which in the case of local governments is the Multi-State Information Sharing & Analysis Center (MS-ISAC) and the Elections Infrastructure ISAC

• I did not know this existed, very good. I will be reviewing this information found on the site, good to know.

It's important to note that moving to the cloud does not shift all of the security burden to the cloud providers. Security in the cloud is a shared model, so while infrastructure security is handled by the provider, it's still your responsibility to secure your applications and data.

•  That's not entirely true, it depends on the model you are using and the contract agreement. If you are using a SaaS model (i.e. O365), then it is up to the vendor to secure the infrastructure and the data. If it is a IaaS, then yes you are correct, it is your responsibility to secure apps/data.

 There is no excuse for not backing up your data, and it's the only 100% effective mitigator against ransomware risk.

•  Also, one that maybe missing is implementing a DR strategy and design methodology when it comes to data recovery, this can be set to 2hr RPO from the time of the incident to bring the data back to its normal state

But for the most part, this write-up covered a number of challenges most organizations will have to implement in order to have an effective recovery strategy.

Todd S
Enterprise Architect
ITOTS Networks, LLC