{"id":444172,"date":"2021-06-29T19:59:00","date_gmt":"2021-06-30T02:59:00","guid":{"rendered":"https:\/\/www.esri.com\/about\/newsroom\/?post_type=arcnews&p=444172"},"modified":"2021-06-28T13:48:43","modified_gmt":"2021-06-28T20:48:43","slug":"after-cyberattack-transportation-organization-recovers-using-cloud-based-gis","status":"publish","type":"arcnews","link":"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis","title":{"rendered":"After Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS"},"author":5752,"featured_media":0,"menu_order":0,"template":"","format":"standard","meta":{"_acf_changed":false,"sync_status":"","episode_type":"","audio_file":"","castos_file_data":"","podmotor_file_id":"","cover_image":"","cover_image_id":"","duration":"","filesize":"","filesize_raw":"","date_recorded":"","explicit":"","block":"","itunes_episode_number":"","itunes_title":"","itunes_season_number":"","itunes_episode_type":"","_links_to":"","_links_to_target":""},"categories":[23392,285372,1021],"tags":[163382,170502,474842,283392,287382],"arcnews_issues":[474922],"class_list":["post-444172","arcnews","type-arcnews","status-publish","format-standard","hentry","category-cloud-computing","category-cybersecurity","category-transportation","tag-arcgis-online","tag-cloud","tag-cyberattacks","tag-data-security","tag-esri-partners","arcnews_issues-summer-2021","arcnews_sections-your-work"],"acf":{"short_description":"The City of Durham lost access to its servers and data, so GeoDecisions put in place processes to ensure that this would never happen again.","pdf":{"host_remotely":false,"file":"","file_url":""},"flexible_content":[{"acf_fc_layout":"content","content":"To protect data and systems from cyberattacks, organizations need to be in a position to quickly identify their IT vulnerabilities.\r\n\r\nAccording to a 2020 Cybersecurity Ventures report, the costs associated with cybercrimes are estimated to grow globally by 15 percent year over year for the next five years. The report calculates cybercrime costs to include \u201cdamage and destruction of data, stolen money, lost productivity, theft of intellectual property, theft of personal and financial data, embezzlement, fraud, postattack disruption to the normal course of business, forensic investigation, restoration and deletion of hacked data and systems, and reputational harm.\u201d\r\n\r\nWhen the City of Durham, North Carolina, suffered a cyberattack in March 2020, it lost all access to its servers, resulting in major data loss. One of the departments affected by the cyberattack was the Durham-Chapel Hill-Carrboro Metropolitan Planning Organization (DCHC MPO), which manages regional transportation planning for the western area of North Carolina\u2019s Research Triangle.\r\n\r\nWith the cyberattack came the loss of DCHC MPO\u2019s Electronic Transportation Improvement Program (eTIP), a map-based app that allows staff to search projects and identify where planned improvements are to be located. In addition, the organization lost access to all its enterprise GIS data, including municipal data layers and data for the City and County of Durham, Chatham County, Orange County, and the North Carolina Department of Transportation.\r\n\r\nThese crippling casualties left DCHC MPO in search of a solution that would not only retrieve what was lost but also put in place a plan, processes, and support to ensure that this would never happen again. Moving its data to the cloud instead of maintaining an on-premises server environment seemed to be the best solution."},{"acf_fc_layout":"image","image":444142,"image_position":"center","orientation":"horizontal","hyperlink":""},{"acf_fc_layout":"content","content":"DCHC MPO teamed up with Esri partner GeoDecisions to regain access to its server data; increase security; and build more efficiency by leveraging technology that includes ArcGIS Enterprise, ArcGIS Pro, ArcGIS Online, and Microsoft Azure. The GeoDecisions team decided to tackle the project in a phased approach that included procuring cloud services, setting up the cloud environment, migrating eTIP and GIS data, conducting trainings, and doing system maintenance."},{"acf_fc_layout":"content","content":"

The Road to Recovery<\/h2>\r\nJumping into action, the GeoDecisions team moved DCHC MPO\u2019s GIS databases and eTIP app to the Microsoft Azure cloud computing service. During this phase, the team developed the work plan, provided project management and oversight, and met with DCHC MPO staff members and key stakeholders to discuss recommendations for cloud migration.\r\n\r\nTo move to Azure, the team needed to identify what data would move, how much RAM and bandwidth would be needed, and whether it should be a single- or multiserver configuration. One challenge that arose during this assessment was that almost 400 feature services would need to be moved while keeping the RAM costs within DCHC MPO\u2019s budget. The organization decided to publish existing feature services using ArcGIS Pro, which can reduce RAM consumption by taking advantage of shared instances that pool central processing unit (CPU) resources for lightly used feature services. This ended up reducing DCHC MPO\u2019s RAM consumption needs by at least 60 percent.\r\n\r\nSetting up the cloud environment involved consolidating servers to create a single, Windows-based virtual machine (VM) that would act as a production application and database server for the eTIP app. This VM contains all the software required to run and maintain eTIP and its supporting functions. In addition, the VM hosts the GIS databases and provides the storage and networking resources the system needs.\r\n\r\nGeoDecisions implemented system security measures as well, which included restricting remote desktop access to specific employees\u2019 IP addresses and updating administrators\u2019 user names and passwords. The team also put into place DCHC MPO\u2019s full system backup strategy, which involved using Azure\u2019s Recovery Services vault to store snapshots of the VMs. This enables instant recovery of the system in the event of a disaster.\r\n\r\nFinally, to migrate and configure DCHC MPO\u2019s apps, the team installed and configured the prerequisite software packages needed for eTIP, including Internet Information Services (IIS) for Windows Server, SQL Server, and ArcGIS Server. Once all the software was installed and operative, the team began migrating the eTIP app database and additional GIS databases."},{"acf_fc_layout":"content","content":"

ArcGIS Online Returns<\/h2>\r\nTo deal with DCHC MPO\u2019s 400 feature services, the GeoDecisions team created a script to automate the publication of each feature service to the new ArcGIS Enterprise instance. This typically tedious and manual task was completed via background processing over the course of a couple afternoons.\r\n\r\nWhen the feature services were republished, they maintained their nomenclature and link structure, so no additional configuration was required to remap existing ArcGIS Online apps or various links within DCHC MPO\u2019s GIS web presence.\r\n\r\nWith the new server structure and ArcGIS Online up and running, Casey Chae, client manager at DCHC MPO, was pleased with the outcome.\r\n\r\n\u201cIt gave us increased security and a renewed confidence in our disaster recovery,\u201d said Chae. \u201cWe are now able to be more proactive than reactive in our efforts to manage and protect our data.\u201d"},{"acf_fc_layout":"content","content":"

System Maintenance, Visualization, and Ongoing Support<\/h2>\r\nIn addition to assisting DCHC MPO in recovering from its cyberattack, GeoDecisions now provides maintenance of the eTIP app and the server it runs on. This includes doing Windows updates, executing minor software patches, and performing virus definition updates. The project team developed a set of test plans for the app as well to ensure that it is functioning as expected."},{"acf_fc_layout":"image","image":444152,"image_position":"center","orientation":"horizontal","hyperlink":""},{"acf_fc_layout":"content","content":"The owners of the eTIP app can visualize system health and costs via a portal view provided by the Azure environment. And configurable dashboards allow for more proactive monitoring of critical metrics, meaning that DCHC MPO would immediately notice and be able to respond to issues such as high RAM and CPU usage, low disk space, or a failed backup.\r\n\r\nThroughout the project, the GeoDecisions team created system documentation to ensure that DCHC MPO stakeholders can perform any necessary tasks themselves if need be. GeoDecisions recommended that DCHC MPO implement a backup and recovery process, too, which the two organizations worked together to develop.\r\n

A Successful Outcome<\/h2>\r\nAfter nearly nine months of not having access to its GIS data and eTIP app, DCHC MPO is up and running again, continuing to do its important work addressing the transportation needs of the communities it serves.\r\n\r\nThe migration to Azure provided DCHC MPO with greater security and maintenance capabilities for its data and apps. And the integration with ArcGIS Pro allowed the organization to conserve its valuable RAM budget, reducing consumption needs by 60 percent.\r\n\r\nWith the move to a more secure environment, proactive monitoring, and an improved backup and recovery process, DCHC MPO\u2019s GIS data is now more secure and flexible than ever.\r\n\r\nFor more information, contact GeoDecisions GIS architect Chuck Harris at 804-767-1870, or visit the GeoDecisions website<\/a>."}],"references":null},"yoast_head":"\nAfter Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS | ArcNews | Summer 2021<\/title>\n<meta name=\"description\" content=\"The City of Durham lost access to its servers and data, so GeoDecisions put in place processes to ensure that this would never happen again.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"After Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS | ArcNews | Summer 2021\" \/>\n<meta property=\"og:description\" content=\"The City of Durham lost access to its servers and data, so GeoDecisions put in place processes to ensure that this would never happen again.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis\" \/>\n<meta property=\"og:site_name\" content=\"Esri\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/esrigis\/\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.esri.com\/about\/newsroom\/app\/uploads\/2021\/06\/arcnews-banner-aftercyberattack-wide.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"After Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS | ArcNews | Summer 2021\" \/>\n<meta name=\"twitter:description\" content=\"The City of Durham lost access to its servers and data, so GeoDecisions put in place processes to ensure that this would never happen again.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.esri.com\/about\/newsroom\/app\/uploads\/2021\/06\/arcnews-banner-aftercyberattack-wide.jpg\" \/>\n<meta name=\"twitter:site\" content=\"@Esri\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t \"@context\": \"https:\/\/schema.org\",\n\t \"@graph\": [\n\t {\n\t \"@type\": \"WebPage\",\n\t \"@id\": \"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis\",\n\t \"url\": \"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis\",\n\t \"name\": \"After Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS | ArcNews | Summer 2021\",\n\t \"isPartOf\": {\n\t \"@id\": \"https:\/\/www.esri.com\/about\/newsroom\/#website\"\n\t },\n\t \"datePublished\": \"2021-06-30T02:59:00+00:00\",\n\t \"description\": \"The City of Durham lost access to its servers and data, so GeoDecisions put in place processes to ensure that this would never happen again.\",\n\t \"breadcrumb\": {\n\t \"@id\": \"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis#breadcrumb\"\n\t },\n\t \"inLanguage\": \"en-US\",\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"ReadAction\",\n\t \"target\": [\n\t \"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis\"\n\t ]\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"BreadcrumbList\",\n\t \"@id\": \"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis#breadcrumb\",\n\t \"itemListElement\": [\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 1,\n\t \"name\": \"Home\",\n\t \"item\": \"https:\/\/www.esri.com\/about\/newsroom\"\n\t },\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 2,\n\t \"name\": \"ArcNews Articles\",\n\t \"item\": \"https:\/\/www.esri.com\/about\/newsroom\/arcnews\"\n\t },\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 3,\n\t \"name\": \"After Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS\"\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"WebSite\",\n\t \"@id\": \"https:\/\/www.esri.com\/about\/newsroom\/#website\",\n\t \"url\": \"https:\/\/www.esri.com\/about\/newsroom\/\",\n\t \"name\": \"Esri\",\n\t \"description\": \"Esri Newsroom\",\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"SearchAction\",\n\t \"target\": {\n\t \"@type\": \"EntryPoint\",\n\t \"urlTemplate\": \"https:\/\/www.esri.com\/about\/newsroom\/?s={search_term_string}\"\n\t },\n\t \"query-input\": {\n\t \"@type\": \"PropertyValueSpecification\",\n\t \"valueRequired\": true,\n\t \"valueName\": \"search_term_string\"\n\t }\n\t }\n\t ],\n\t \"inLanguage\": \"en-US\"\n\t },\n\t {\n\t \"@type\": \"Person\",\n\t \"@id\": \"https:\/\/www.esri.com\/about\/newsroom\/#\/schema\/person\/41c803b2ea8734c36f9c4e9586d1449d\",\n\t \"name\": \"Amy Ambard\",\n\t \"image\": {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\/\/www.esri.com\/about\/newsroom\/#\/schema\/person\/image\/\",\n\t \"url\": \"https:\/\/secure.gravatar.com\/avatar\/f356480172f8ad0bc8d72b855e84171c52f1944c7c7779f3e425d73bf3efa3c7?s=96&d=blank&r=g\",\n\t \"contentUrl\": \"https:\/\/secure.gravatar.com\/avatar\/f356480172f8ad0bc8d72b855e84171c52f1944c7c7779f3e425d73bf3efa3c7?s=96&d=blank&r=g\",\n\t \"caption\": \"Amy Ambard\"\n\t },\n\t \"url\": \"\"\n\t }\n\t ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"After Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS | ArcNews | Summer 2021","description":"The City of Durham lost access to its servers and data, so GeoDecisions put in place processes to ensure that this would never happen again.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis","og_locale":"en_US","og_type":"article","og_title":"After Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS | ArcNews | Summer 2021","og_description":"The City of Durham lost access to its servers and data, so GeoDecisions put in place processes to ensure that this would never happen again.","og_url":"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis","og_site_name":"Esri","article_publisher":"https:\/\/www.facebook.com\/esrigis\/","og_image":[{"url":"https:\/\/www.esri.com\/about\/newsroom\/app\/uploads\/2021\/06\/arcnews-banner-aftercyberattack-wide.jpg","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_title":"After Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS | ArcNews | Summer 2021","twitter_description":"The City of Durham lost access to its servers and data, so GeoDecisions put in place processes to ensure that this would never happen again.","twitter_image":"https:\/\/www.esri.com\/about\/newsroom\/app\/uploads\/2021\/06\/arcnews-banner-aftercyberattack-wide.jpg","twitter_site":"@Esri","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis","url":"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis","name":"After Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS | ArcNews | Summer 2021","isPartOf":{"@id":"https:\/\/www.esri.com\/about\/newsroom\/#website"},"datePublished":"2021-06-30T02:59:00+00:00","description":"The City of Durham lost access to its servers and data, so GeoDecisions put in place processes to ensure that this would never happen again.","breadcrumb":{"@id":"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.esri.com\/about\/newsroom\/arcnews\/after-cyberattack-transportation-organization-recovers-using-cloud-based-gis#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.esri.com\/about\/newsroom"},{"@type":"ListItem","position":2,"name":"ArcNews Articles","item":"https:\/\/www.esri.com\/about\/newsroom\/arcnews"},{"@type":"ListItem","position":3,"name":"After Cyberattack, Transportation Organization Recovers Using Cloud-Based GIS"}]},{"@type":"WebSite","@id":"https:\/\/www.esri.com\/about\/newsroom\/#website","url":"https:\/\/www.esri.com\/about\/newsroom\/","name":"Esri","description":"Esri Newsroom","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.esri.com\/about\/newsroom\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.esri.com\/about\/newsroom\/#\/schema\/person\/41c803b2ea8734c36f9c4e9586d1449d","name":"Amy Ambard","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.esri.com\/about\/newsroom\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f356480172f8ad0bc8d72b855e84171c52f1944c7c7779f3e425d73bf3efa3c7?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f356480172f8ad0bc8d72b855e84171c52f1944c7c7779f3e425d73bf3efa3c7?s=96&d=blank&r=g","caption":"Amy Ambard"},"url":""}]}},"sort_order":"14","_links":{"self":[{"href":"https:\/\/www.esri.com\/about\/newsroom\/wp-json\/wp\/v2\/arcnews\/444172","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.esri.com\/about\/newsroom\/wp-json\/wp\/v2\/arcnews"}],"about":[{"href":"https:\/\/www.esri.com\/about\/newsroom\/wp-json\/wp\/v2\/types\/arcnews"}],"author":[{"embeddable":true,"href":"https:\/\/www.esri.com\/about\/newsroom\/wp-json\/wp\/v2\/users\/5752"}],"version-history":[{"count":0,"href":"https:\/\/www.esri.com\/about\/newsroom\/wp-json\/wp\/v2\/arcnews\/444172\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.esri.com\/about\/newsroom\/wp-json\/wp\/v2\/media?parent=444172"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.esri.com\/about\/newsroom\/wp-json\/wp\/v2\/categories?post=444172"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.esri.com\/about\/newsroom\/wp-json\/wp\/v2\/tags?post=444172"},{"taxonomy":"arcnews_issues","embeddable":true,"href":"https:\/\/www.esri.com\/about\/newsroom\/wp-json\/wp\/v2\/arcnews_issues?post=444172"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}