Commvault & Pure Storage unveil cyber readiness solution

Commvault and Pure Storage have unveiled a joint cyber readiness solution designed to enable financial institutions to comply with new regulatory requirements, including the European Union's Digital Operational Resilience Act (DORA).

DORA, which is set to be implemented in January 2025, introduces a comprehensive framework ensuring that financial entities such as global banks are equipped to handle unexpected incidents and recover effectively. The regulation mandates organizations to report on cyber resiliency practices, encompassing risk management and operational resilience testing.

The new solution from Commvault and Pure Storage helps organisations fulfill compliance requirements by providing an integrated platform that secures customer data against cyber-attacks, including threats from ransomware and malicious actors. The solution combines Commvault's data protection with Pure Storage's platform capabilities.

Key elements of risk management in DORA include protection and prevention, detection, and response and recovery. The Commvault and Pure Storage solution addresses these areas with several features.

Under protection, the solution employs zero-trust principles, incorporating advanced authentication, storage encryption, and compliance locks to secure backup data. Furthermore, it offers software and hardware immutability via Pure SafeMode Snapshots and S3 Object Locking on the Pure Storage Platform for enhanced data protection.

In terms of detection, Commvault provides tools for identifying and addressing risks and threats. The solution utilises AI-assisted anomaly detection and cyber deception technology, which involves using decoy devices to detect threats, offering early warnings to facilitate swift responses and recovery.

For response and recovery, the solution leverages storage-based snapshots from the Pure Storage Platform, integrated with Pure SafeMode, to ensure rapid recovery of critical systems, especially those with stringent recovery objectives such as payment systems.

Commvault also supports integration with various cybersecurity and threat intelligence solutions to enhance threat detection and response efforts.

The collaboration supports continuous testing of cyber recovery in secure, isolated environments to improve organisational preparedness for breaches or outages. This testing can be conducted on-demand within cloud-isolated settings using Commvault's Cleanroom Recovery solution or via isolated recovery environments using Commvault and Pure Storage offerings. These capabilities provide organisations with the required flexibility to meet data sovereignty and operational demands.

Furthermore, the solution aids compliance under other frameworks such as the EU's NIS2 Directive and the Reserve Bank of India's e-mandates for recurring transactions.

Alan Atkinson, Chief Partner Officer at Commvault, stated: "Commvault and Pure Storage are delivering a globally scalable solution for digital operational resilience. Whether organizations are trying to comply with DORA or the multitude of new regulatory compliance requirements, we combine exceptional detection, forensics, and reporting capabilities with immutable and rapidly recoverable snapshots in one comprehensive solution."

Patrick Smith, Field CTO, EMEA, at Pure Storage, commented: "The financial sector is under constant threat of cyberattacks that have the ability to undermine economies and consumer confidence. At the same time, cyber regulations are putting stretched IT and security teams to the test. Through our partnership with Commvault, we are giving financial institutions critical tools that not only help comply with regulations like DORA but advance their cyber resilience to help ensure enterprise data remains secure, protected, and if necessary, recoverable."