Mind the “Air" Gap

Many of you have probably not even heard of the “Air Gap” theory, which in my view is a good thing.

Once the public cloud started to eat into the market share of tape sales, or at least threaten to eat into it, tape salesmen and manufacturers started to talk poorly of the public cloud and the ease with which its security can be breached or that viruses could be planted. 

In order to complete the story, the tape industry and its sales teams started to talk about the “Air Gap”.  The Air Gap is essentially a term used to describe the fact that data written to a tape is no longer connected to any machine or able to be communicated with, and therefore cannot be hacked or have a virus affect its contents. The view was that this was another way to convince people that tape is safer than cloud.  It is part of the reason I started Tape Ark.

Let’s be honest. We saw an announcement today that one of Australia’s largest banks lost two tapes that contained over 20 million customer financial statements. The bank is not sure where the tapes are as a third party contractor was responsible. Maybe the data went into the Air Gap? Anyone know of a case where someone misplaced their cloud?

Let’s take a quick look at this:

  1. When a tape is created, most companies use an offsite tape storage provider.
  2. Once you have handed that media over to a tape storage provider – do you know what happens to it?  A courier collects the tape and drives it back to the warehouse. If he decides he wants a pie and chips for lunch he stops at his local lunch spot and has lunch. Essentially, tapes left unsecure, in the back of a car or van, easily stolen, heating up in the sun while the driver eats his lunch.
  3. Once back in the vault, they are placed in a room on a shelf next to thousands of other tapes that belong to other clients. Visitors come and go, in and out of that vault, and can easily walk away with one or more tapes if they wish.
  4. The tape storage provider themselves has unfettered access to your tapes while they hold them. Could you tell if someone had taken the data and copied it or extracted it?
  5. If you need the tape back, the same courier driver will bring it back to you. Will he have lunch today? Will you be his fifth tape drop-off of the day, where he leaves your tapes unattended in his van for hours while he does four other drop-offs before yours?

Let’s be honest. Would you prefer to rely on a tape moving around and the lunch habits of your courier driver or would you prefer to rely on encryption, Amazon Web Services IAM access protocols, online data transport and retrieval and a cloud system that is treated like a military installation?  Air Gap does not = Data Security. Data Security = Data Security.

#NoMoreTape 

4 Comments

Guy Holmes

Guy is a graduate of Geophysics from Macquarie University in Sydney, and has completed a Masters of Business Administration (Technology Management) from Deakin University in Melbourne. 

Guy is a successful leader with a proven track record in the growth of start up and turn around businesses in the IT, medical and information management sectors.

Guy has extensive experience in the oil and gas, minerals, medical, and information management industries in Australia and the Asia Pacific and is a highly regarded entrepreneur.

Guy’s experience includes:

• Sourcing Venture Capital
• Acquisitions and Sales of businesses
• Commercial technology development
• Research and development for internal and external products
• International business development
• Product and service marketing, development, and management
• Multimillion dollar contract negotiations with government and private sectors (International and domestic)
• Development of business and marketing plans, strategy documents , and other executive level documents
• Industry leader in information management, data management, archiving strategies, legacy technology with a particular focus on the management of oil and gas and minerals information and data on a global scale.
• Operational management and refinement to seek maximum profitability
• Grant applications, financing arrangements, and seeking alternative funding

The results that Guy has achieved in his varied roles stand testimony to his abilities to:

• Manage organizational resources to achieve results
• Develop and drive technology solutions to achieve business goals
• Grow businesses that are both start-up and/or stagnant
• Successfully land, negotiate, perform and complete projects both domestically and internationally

Guy has been married for 24 years and has five children. He enjoys playing ice hockey, travel, mountaineering and spending time with his family and reading.