Energy · 2022–2024
Recovery built to survive a ransomware attack
I led the design and build of an immutable backup platform across AWS, GCP and Azure, so a major UK energy provider could keep operating if it were ever hit by ransomware.
The challenge
Ransomware is no longer a question of if. The organisation needed to know that, in the event of an attack, it could still operate, and that the data and infrastructure it depended on could not be encrypted or deleted by an attacker.
What I did
I led the design and build of a platform that keeps copies of the infrastructure and data the business needs to operate in the cloud, where an attacker can’t encrypt or delete them.
- Worked with business analysts across business units to identify the essential infrastructure and data required for minimal operation during an attack.
- Designed and built a hybrid, multi-cloud platform integrating AWS, Google Workspace/GCP and Azure.
- Implemented it with Terraform, Python and Node.js/React/Next.js.
The outcome
A cloud-native, immutable backup platform holding the minimum infrastructure and data the business needs to operate, out of ransomware’s reach, so the organisation could keep running even if its primary systems were hit.
Have a hard problem worth solving?
Tell me about the system, the team or the deadline. I'll tell you honestly whether I can help.