Glossary
Data Isolation
What is data isolation?
Data isolation is the practice of separating data sets from one another in an effort to minimize breach risk and unauthorized access. When data is isolated, it ensures that only a small percentage of data is being accessed at once.
How does data isolation work?
Logical barrier: You can set up various access controls to make sure only authorized people gain access to your data.
Multi-factor authentication: Account access is granted only after a user successfully provides a code—as identity evidence—on an authentication device, such as a smartphone.
Multi-user authentication: Requires that multiple root users sign off on an account deletion request—preventing malicious actors who have gained access to your credentials from deleting your storage account.
Physical barrier: You can physically store different data sets on different servers.
Virtual barrier: You can use virtualization techniques to digitally segregate data from each other in a multi-cloud environment.
Object replication: Enables customers to easily copy objects from a storage bucket in one cloud region to a bucket in another cloud region.
Benefits of data isolation
Data isolation provides various benefits for organizations, such as improving your cyber resilience strategy, reducing complexity and confusion, and increasing your security posture.
Improving cyber resilience
Data isolation improves cyber resilience by limiting the cyberattack surface, ensuring that bad actors can’t access all of your data in a single attack.
Reduce complexity
Data that is isolated is data that is less complicated to monitor.
Wasabi and data isolation
Object replication is a feature of Wasabi Hot Cloud Storage that allows customers to copy objects from a storage bucket in a specific Wasabi region to a different bucket in another Wasabi region on the same continent. Putting geographical distance between the copies of your data is ideal for adding an extra layer of cloud data protection. You can provide automatic failover if the primary storage region is offline. With two storage regions and automatic replication between them, downtime can be reduced to seconds per year on average.