Authors: Bill White, Dino Amarini, Diego Bessone, Tom Bish, Nathan Brice, Richard Cairns, Giovanni Cerquone, Nick Clayton, Michael Frankenberg, Nathan Gurley, Maryellen Kliethermes, David Matoe, Kevin Miner, Nadim Shehab, Karen Smolar, John Thompson, Paolo Vitali and Joseph Welsh II
Cyberattacks and data corruption threats continue to escalate, which makes cyber resiliency a critical component of an enterprise IT strategy. Although traditional disaster recovery (DR) focuses on physical failures, cyber resiliency addresses logical corruption that is caused by ransomware, malware, or insider threats. This IBM Redbooks® publication introduces the IBM Z® Cyber Vault solution, which is a comprehensive approach to safeguarding IBM Z environments through immutable backups, isolated recovery systems, and automated validation processes.
The IBM Z Cyber Vault solution combines three core domains:
Storage, which uses IBM DS8000® Safeguarded Copy for point-in-time, tamper-proof backups
Protection (LCP) Manager and IBM Copy Services Manager (CSM) to orchestrate capture, validation, and recovery
Environment, which is an air-gapped IBM Z system for forensic analysis and surgical or catastrophic recovery
The solution supports proactive data validation, forensic investigation, and recovery strategies that minimize downtime and data loss, and integrate with advanced tools such as IBM Z Backup Resiliency (IZBR) and IBM Threat Detection for z/OS (TDz).
This publication provides practical guidance for planning, designing, and deploying the IBM Z Cyber Vault solution, including architecture decisions, storage sizing, automation scripts, and validation frameworks. It also explores advanced capabilities such as offline backups, offensive security (OffSec) testing, and IBM Db2® rollforward recovery.
Intended for IT managers, architects, system programmers, and security professionals, this publication equips organizations to strengthen cyber resiliency and help ensure business continuity (BC) in the face of evolving threats.
Chapter 1. Business resiliency: Proactive analysis and expedited recovery
Chapter 2. Planning and designing the IBM Z Cyber Vault solution
Chapter 3. IBM Z Cyber Vault capabilities
Chapter 4. Deploying the IBM Z Cyber Vault environment
Chapter 5. IBM Z Cyber Vault: Building on the foundations
Appendix A. Monitoring the IBM Z Cyber Vault environment
IBM Storage DS8000 Safeguarded Copy: Updated for DS8000 Release 10.1
IBM and CMTG Cyber Resiliency: Building an Automated, VMware Aware Safeguarded Copy Solution to Provide Data Resilience
Cyber Resiliency with IBM Storage Sentinel and IBM Storage Safeguarded Copy
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
