CU*Answers is occasionally asked about controls regarding ransomware and backups.  Some questions are related to our data processing software (CU*BASE) and others are related our Imaging System (CU*Spy).  CU*Answers and our credit union clients are on entirely separate, segregated networks, and therefore it is highly unlikely if one business victimized by ransomware that both entities would be affected.  The CU*Spy discussion does not apply to clients that have their own in-house imaging solution.

CU*BASE data processing backups are accomplished through High Availability replication, and backup tapes are created for the purposes of restoration of data for disaster recovery. Backups are performed daily on the Production system and the Development system. All member data is encrypted when backups are created. Significant files and programs are replicated in real time using iTera disk to disk replication. Management completes the iTera HA Daily Tasks List to monitor replication status.  Complete policy and procedures for Production and Development system backups are documented and maintained. Procedures include naming conventions, a process description, content summary, media type, retention cycle, a backup process summary and the program that is called for the process.

CU*Spy is part of the daily backup system.  Encrypted system snapshots are made to local, high speed network attached storage (NAS) device. Incremental backups are compressed and transferred to an offsite via high-speed encrypted connection. The system offers restore capabilities for multiple file versions. The backup system is monitored 24x7 and a ticket is automatically generated for missed backup or any issue with the backup system.  The local and remote NAS devices also offer backup virtualization capabilities, facilitating a business continuity strategy for critical hardware or environmental failures at the primary site. Data backup integrity, recovery and virtualization are tested on the backup appliances on a quarterly basis.  Storage media is available to clients who wish to purchase.