Recovery from corruption differs from recovery from outage
If a system goes down, you bring it back. If the data has been corrupted or encrypted, bringing it back faster makes things worse.
Replication and failover are built to propagate the current state quickly, which is exactly wrong when the current state is the problem. Recovering from corruption means going backwards in time to a known good point, which is a completely different capability from staying up.
More on Resilience
- High availability and disaster recovery solve different problemsA part, or the place
- A dependency can be more critical than the applicationThe lighter side goes down
- Manual workarounds have capacity limitsThe pipe gets narrower
- Recovery priorities should follow business outcomesWhose order is it?
- Resilience includes people and suppliersThe shelf runs out
- Failover can fail if never exercisedThe day it is asked