Commvault Transforms Concept of Cleanrooms, Gives CISOs / CIOs Confidence They Can Recover When Attacked

Commvault, a leading provider of cyber resilience and data protection solutions for the hybrid cloud, is announcing a new era in cleanroom technology.

Via its groundbreaking Commvaultâ Cloud Cleanroomä Recovery offering, the company is transforming – from every vantage point – what recovery looks like in the modern world:

• how companies can safely and securely recover a clean copy of their data after a cyberattack;
• where they can recover to – ushering in on-demand cleanroom recovery to the cloud;
• which companies can access cleanroom technology – not just the Fortune 50, but organisations of all sizes; and
• when recovery testing can be done – monthly if desired – so CISOs can say with confidence to their board, ‘when we’re hit, we know we can make a clean recovery.’

A cleanroom is an isolated recovery environment that is frequently used for secure cyber recovery scenarios. However, traditional cleanrooms are often resource-intensive, requiring organisations to maintain duplicative environments for every critical application across every server and every location. Many organisations simply can’t afford to do this.

Additionally, many companies don’t have the time, money, or staff required to test all the interdependencies across these types of hybrid environments to know they can recover when attacked. If they can test, and it fails, they often don’t have the resources to test again. This leaves organisations unpracticed, vulnerable, and at the mercy of bad actors. Commvault is solving these problems.

The Cleanroom Concept Reimagined

Commvault has reimagined the cleanroom from the ground up.

First, Cleanroom Recovery is being extended to support Commvault’s SaaS customers*. This deployment option democratises the technology so that companies of all sizes can benefit from the offering. Second, the cleanroom is being hosted in the cloud. When bad actors strike, Cleanroom Recovery is designed to orchestrate recovery into a clean, isolated location in Microsoft Azure. Customers can do this on-demand and only pay for it when they use it. Third, Cleanroom Recovery uniquely gives organisations the ability to rapidly and regularly test and, if necessary, retest their cyber recovery plans with ease across their IT infrastructure.

“With disaster recovery, testing your recovery strategy once a year was fine. For example, with a natural disaster, you didn’t have to worry about bad actors infiltrating your systems. You just needed to be able to recover. Now, with AI-driven attacks, threat vectors change by the hour. The need to not only test your recovery frequently but know you have a clean place to recover in the cloud has never been more important,” said Brian Brockway, CTO, Commvault.

Cleanroom Recovery provides numerous benefits.

Simple:

·       Customers can quickly set up a cleanroom-on-demand in Microsoft Azure.

·       Cleanroom recovery also simplifies the recovery of applications and the data those applications rely on. For example, Cleanroom Recovery will be designed to restore Microsoft Active Directory*. This is the service that controls human access to all applications and other critical enterprise assets. Being able to easily restore Active Directory and validate its consistency and operational health can help ensure proper authorisations to data remain in place.

Secure:

• With Commvault, because the cleanroom is generated on-demand in the cloud, it is designed to be untainted since it doesn’t exist until the organisation needs to use it.
• Commvault cleanrooms are in an isolated environment, so application testing and production system backup can be conducted in a safe space.
• Cleanroom Recovery includes an integration with Microsoft Defender that automates threat scanning to help ensure data is clean.
• In addition, Cleanroom Recovery will include capabilities** that enable companies to rebuild applications and services from a known clean state, as needed. This can help customers maintain server operations while enhancing security and efficiency.

Intelligent:

• AI-enabled Cleanpoint™ Validation automatically empowers customers to rapidly identify the last clean recovery point.
• Users can customise recovery sequences, so data is recovered in a logical order. Users can also easily convert VMs from any hypervisor to Azure VMs.
• A forthcoming integration with Palo Alto Networks Cortex XSOAR** extends the power of Commvault Cloud Cleanroom Recovery. It enables customers to investigate security incidents by utilising XSOAR to enrich incidents with the latest threat intelligence data – streamlining the recovery of compromised assets into a cleanroom for forensic analysis and rapid, secure cyber recovery.

With Cleanroom Recovery, customers also benefit from the Commvault Cloud platform, powered by Metallic AI. Commvault Cloud meets the most stringent global security standards and is currently the only FedRAMP High In Process data protection platform. The platform’s unique architecture enables customers to secure and recover their data, across any workload, and from any location to any location. And, in the future, via its recent Appranix acquisition, customers will be able to uniquely blend risk, readiness, and recovery capabilities provided by Commvault with cloud application rebuild capabilities provided by Appranix.

“Enterprises need to think about their cyber preparedness strategy, including protecting mission critical assets via secure and air-gapped backups and the ability to recover fast,” said Aung Oo, General Manager, Azure Storage, Microsoft. “Commvault Cloud Cleanroom Recovery augments air-gapped data protection built on Azure with fast and secure recovery. It enables customers to test their resilience plans, and when necessary, recover to a trusted, clean, isolated location in Microsoft Azure. The clean and isolated copy also enables forensics for auditors and insurers and gives organisations a tremendous advantage in the fight against ransomware and other cyber threats.”

“As cyberthreats grow in frequency and sophistication, global enterprises recognise the need to bolster their defences with proactive security measures that safeguard not just their data, but the entirety of their business operations,” said Mark Bridges, Sr. Director, Strategic Alliances, Pure Storage. “Pure Storage and Commvault share a deep commitment to empower customers in navigating this journey with confidence, prioritising rapid recovery that supports comprehensive data protection. We’re thrilled to see the launch of Commvault Cloud Cleanroom Recovery and look forward to our continued partnership to foster a future where businesses thrive securely.”

“Our research shows that ransomware and cyberattacks in general are an existential risk for the vast majority of organisations. In an environment where ransomware and AI-driven cyberattacks are increasingly sophisticated, Commvault’s Cleanroom Recovery critically enables organisations to maintain operational integrity through a continuous loop of testing and constant adaptation,” said Christophe Bertrand, Practice Director, Enterprise Strategy Group. “This solution not only meets the critical need for resilience but evolves with it.”

Supporting Quotes: Customers

·       American Pacific Mortgage: “Cleanroom Recovery is a game-changer for Commvault Cloud,” said Michele Buschman, CIO, American Pacific Mortgage. “It enables comprehensive testing, and retesting, on the fly which is something that traditional cleanroom solutions don’t provide. It also is designed to help organizations to rapidly recovery from a cyber incident. The level of confidence and security this innovative solution can provide is invaluable.”

·       Emerson: “Commvault Cloud Cleanroom Recovery not only enables organisations to test their recovery plans often, but know that if they’re hit, they can be resilient,” said Zach Kruszewski, Manager CCoE Compute Architecture and Design Team, Emerson Electric. “Having this sense of security is so important in the ransomware era.”

·       Kelyn Technologies US: “We are genuinely excited about the advent of Cleanroom technology in our services,” said Kevin Cronin, CEO & Co-Founder, Kelyn Technologies US. “This approach allows us to test our recoverability and create a meticulous checklist for system recovery, utilizing a fully segmented Cleanroom to rapidly restore critical infrastructure. It’s our answer to mitigating today’s ransomware threats, providing a secure environment to assess and ensure recoverability.”

Other Supporting Quotes

·       HCL Tech: “For over 10 years, some of the world’s largest enterprises have trusted HCLTech and Commvault to deliver offerings that help secure, manage, and recover their data across hybrid and multicloud environments,” said Rampal Singh, Head of Hybrid Cloud Services, HCLTech. “The Cleanroom Recovery solution takes innovation to the next level, enabling us to pioneer a simpler, more intelligent, and achievable approach to cyber resilience.”

·       Hitachi Vantara: “The launch of Commvault Cloud Cleanroom Recovery represents a powerful addition to Hitachi Vantara’s robust data resilience offerings, and as a result, our shared goal of delivering true cloud security and resilience to customers has never been more attainable,” said Dan McConnell, Senior Vice President of Product Management for Digital Infrastructure, Hitachi Vantara. “Providing customers with the ability to test their cyber recovery plans in advance, along with having a clean recovery point, fills a critical gap in the marketplace today.”

·       Kyndryl: “Given the changing regulatory landscape with focus on new and updated regulatory technical standards coming into effect, Cyber Regulation Readiness is a top priority for C-suite and executive board members – they need to know their organisation’s data will be secure, recoverable, and quickly operational following an attack,” said Allen Downs, Vice President, Global Resiliency Domain Leader, Kyndryl. “The mindset is – “Business Operational Risk” and the ability to execute and report on their ability to recover is critical. This is driving the need for mature capabilities to protect and maintain a verifiable copy of critical data, and driving the need for new workflow processes including Cleanroom Recovery to detect and verify data is free of infection, both to and from a secure airgap immutable Cyber Vault. Capabilities like Cleanroom Recovery enable us to help deliver on this mandate, giving customers a secure, clean space for testing and recovery that balances cost with risk mitigation – now that is true ‘cyber resilience by design’.”

Availability

Unless otherwise noted, the latest features of Cleanroom Recovery are available now.

*Functionality of these features is targeted for availability in summer 2024.

**Functionality of these features is targeted for availability in fall 2024.

More Information 

• If you plan to be at RSA, see Cleanroom Recovery in action: May 6-9, North Expo Booths #5778 and #4308.
• Attend one of Commvault’s Minutes to Meltdown ransomware simulation events.
• Learn more about Cleanroom Recovery via this blog and our website.