We recently worked with a company that had the unfortunate experience of dealing with ransomware called Alpha Crypt. A separate Experts-Exchange question was open for that issue which to date has not been resolved.
The company did not have support in place to monitor and maintain their server, data and workstations and a result of expired virus protection on a workstation AND their domain controller the Alpha Crypt ransomware encrypted the workstation documents and files on mapped share points.
It also needs to be mentioned that they did not have any backups. It was thought that because the server was configured for RAID that backups weren't necessary which now brings up my question and please keep in mind that the decision maker is not at IT person and only services as contracted accountant.
Instead of having us reformat and re-install their server the decision has been made to move whatever data they can find off of their CD/DVDs, flash drives and other workstations to BOX and not have any on-premise data. In today's market cloud-based storage services very affordable for most business and the convenience has many benefits. The process of syncing on-premise data to such services is ideal and what we recommend as a solution for information that doesn't contain anything sensitive.
I'd like to inquire thoughts about using cloud-based storage services such as BOX as the primary data repository for business. As mobile broadband connections become faster, more reliable and accessible in remote areas I feel there will be an increase in cloud storage usage see this as something beneficial minus security concerns about ransomeware such as Alpha Crypt. A call to BOX to inquire what would happen in a client became infected resulted in being told that they would just perform a restore of the clients data. Alpha Crypt is one of the nastiest infections I have ever seen and it even deletes shadow copies. I am sure BOX has all of the controls in place to ensure that the client data is protected and restorable, but what about the less experienced or understaffed low budget operations?
I strongly feel that businesses should still maintain critical and sensitive data on-premise OR have the option to backup their cloud data elsewhere such as their location or to another cloud storage provider. Something like this would be possible using a virtual server and a backup application such as StorageCraft.
So with this long post - what are the community members thoughts about using cloud storage as a primary and only data repository?
Thank you for your interest and responses.