The University of Edinburgh

Use case

Cloud Resilience, Business Continuity, Risk Management

Industry

Education

Team size

15,000–16,000 employees

Services

Escrow as a Service

Challenge

With an established reputation ranking first in the UK for ‘Veterinary Science’ for the past three years, the School made the decision to procure a cloud-based bespoke management system enabling them to continually develop as a world leading veterinary centre of excellence.

Hosted on the AWS platform, the application helps run the School’s clinical services system. With features consisting of patient records, imaging and laboratory device connectivity and resource management, disruption to its business critical application would be catastrophic if lost.

According to Escode research, many organisations would struggle to maintain business continuity if they lost access to their cloud-based applications and associated data. Over half of the organisations surveyed as part of the study citied that they do not back up and secure their own data.

With 74% of organisations encountering disruptive events with third parties in the last three years. It is understandable that the school felt the need to establish a continuity plan to address potential service disruptions.

“Escode Escrow as a Service solution has supported us in managing and mitigating the risks associated with Cloud-hosted software.”

– Sue Murphy, Director at Royal (Dick) School of Veterinary Studies

Solution

Although its cloud-based software provides the School a faster implementation of services, the application can be accessed anywhere and anytime over the internet, exposing the veterinary school more broadly to potential exploitation from today’s cyber attackers. Moreover, with the application hosted in a multi-tenanted environment the attack surface increases, leading to an increased chance of data leakage if the separation controls fail.

Requiring a simple cloud resilience solution that would ensure access to its business critical system should its bespoke cloud integrator go out of business or fail to meet its contractual obligations, Escode’s in house technical team advised an EaaS Replicate agreement.
EaaS Replicate is the ultimate answer to cloud software resilience, ideal for software applications that are shared or used by a number of customers.

EaaS Replicate is the ultimate answer to cloud software resilience, ideal for software applications that are shared or used by a number of customers.

As part of an EaaS Replicate solution, the cloud software supplier simply transfers a copy of the cloud environment to Escode, which is then digitally and physically stored in Escode’s secure vault and cloud, with Security Operations Centre (SOC) monitoring provided for additional assurance.

This delivers state-of-the-art detection, protection and remediation to ensure the schools bespoke application is continually protected from today’s cyber adversaries.

"Should the worst happen we have the confidence and the means to continue operating as normal with minimum disruption.”

– Sue Murphy, Director at Royal (Dick) School of Veterinary Studies

Results

Relying solely on cloud-based software applications can leave the University vulnerable, especially if their software supplier encounters any issues. It is therefore important to have a robust and well-tested business continuity plan in place that can be acted upon if needed.

With Escode’s Escrow as a Service Replicate enhancing their operational resilience, the School can confidently innovate with the latest cloud-based technologies, and enjoy the new and exciting benefits it brings.

Should a release event occur, Escode will release all associated materials and documentation credentials including access keys, log-in details, usernames, encryption details and passwords enabling The University of Edinburgh the right to use, restore or recreate their application/data service.

Sue Murphy, Director of Clinical Services and Director of the Hospital for Small Animals, Royal (Dick) School of Veterinary Studies commented: “Escode, part of NCC Group’s Escrow as a Service solution has supported us in managing and mitigating the risks associated with Cloud-hosted software. Should the worst happen we have the confidence and the means to continue operating as normal with minimum disruption”.