Re: Consolidated Database Risks and Mitigating Controls

[Neil Matatall <nmatatal () UCI EDU>]

We are in the process of doing this at UC Irvine. I will certainly share 
what we learn. However, we are not moving to a single server, but rather 
multiple, purposed servers. For example: CC server, PII server, and 
generic application server (per supported department). It is not as cut 
and dry as this but that is the general strategy we are using. This is 
also happening while we are segmenting our network to protect access to 
each server.

Delacruz, Jay J. wrote:
> Educause Team,
>
> Anybody want to share their experience with consolidated databases? In 
> particular; risks of that specific architecture and what mitigating 
> controls were used. What risks apply to data loss, disaster recovery, 
> business continuity planning etc..?
>
> “Putting all your critical assets in one basket.” Great idea or is it 
> an unnecessary risk?
>
> Thanks ahead for any input… J
>
> Jay Delacruz, CISSP
>
> Information Systems Security Department
>
> Wake Forest University
>
> Winston-Salem NC 27109
>
> delacrj () wfu edu <mailto:delacrj () wfu edu>
>
> 336-782-0116