{"id":46093,"date":"2021-10-18T13:37:48","date_gmt":"2021-10-18T13:37:48","guid":{"rendered":"https:\/\/www.commvault.com\/?p=46093"},"modified":"2024-01-03T13:52:34","modified_gmt":"2024-01-03T18:52:34","slug":"ransomware-defense-in-depth","status":"publish","type":"post","link":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth","title":{"rendered":"Ransomware Defense in Depth \u2013 Best Practices for Security and Backup Data Immutability"},"content":{"rendered":"\n<p class=\"\">The world around us is changing rapidly where everything is being offered and consumed as a Service \u2013 including Ransomware. Ransomware as a Service (RaaS) is proving to be the \u201cvirus\u201d (pun intended) that is forcing the evolution of security postures adopted by organizations.<\/p>\n\n\n\n<p class=\"\">Organizations are in varying stages of their journey to cloud, which is being made more challenging by bad actors and threat vectors. Add to this the concerns around misconfigurations in cloud that market analysts have declared as one of the key vulnerabilities that bad actors tend to exploit first.<\/p>\n\n\n\n<p class=\"\">In the current IT climate, with the ransomware threat looming large, Zero Trust architecture has become central to all enterprise\u2019s security posture. \u201cChallenge and Verify\u201d all communication and access paths between components of the IT landscape is the core tenet of a Zero Trust architecture, which, when available on an easy-to-consume platform, makes it a compelling proposition.<\/p>\n\n\n\n<p class=\"\">Zero Trust architecture is a shift in paradigm from the concepts of \u201cpersistence\u201d of connection that we have seen in the past. It starts with laying the foundations for micro-segmentation of the IT landscape, access limited with the Least Privilege principle, and all communication to and between the micro-segments being authenticated, audited, and verified. Leveraging micro-segmentation helps create micro-containment zones in the event of a disaster to minimize the lateral movement of threat vectors.<\/p>\n\n\n\n<p class=\"\">However, despite best-laid plans, we witness organizations falling victim to <a href=\"https:\/\/www.commvault.com\/blogs\/ransomware-protection#attack\">ransomware attacks<\/a> and being subject to double extortion. In such cases, an organization\u2019s ability to minimize business downtime relies heavily on its secure backup copies and recovering safely, at optimal speed, performance, and cost. This is proving to be the insurance policy that customers are relying on.<\/p>\n\n\n\n<p class=\"\">Constantly in step with the changing times, Commvault, armed with 25 years of experience in the data protection and management arena, helps customers recover their data and bounce back from cyber and disaster recovery (DR) crises via a multi layered security approach. These success stories only go to highlight the importance of backup copies that are cyber- and recovery-ready!<\/p>\n\n\n\n<p class=\"\"><br>To be able to bring all siloed workloads \u2013 reducing the surface area of attack, into a unified framework that can easily fit into customers current hybrid ecosystem, with on-premises and SaaS presence, and consistently deliver the highest level of protection and recovery assurance at every layer of interaction, is now the gold standard in cyber-recoverability.For Commvault, adhering to business SLAs is of the highest priority and a non-negotiable parameter.<\/p>\n\n\n\n<p class=\"\">Across our Intelligent Data Services Platform, customers have a wide range of options to support their workloads and deployment flexibility. Commvault customers enjoy a seamless experience of protecting and managing data across on-premises, cloud, and SaaS platforms.<\/p>\n\n\n\n<ul class=\"is-style-numbered-large wp-block-list\">\n<li class=\"\">Commvault HyperScale X is Commvault\u2019s hyperconverged infrastructure (HCI) offering leveraging Commvault Distributed Storage. Customers benefit from uniformly high standards of security, segmentation, and ease of deployment. HyperScale X also benefits the customer with seamless cloud integration options.<\/li>\n\n\n\n<li class=\"\">Metallic Cloud Storage Services (MCSS) is a Commvault\/Metallic flagship offering built on Azure services. Metallic Hub provides SaaS flexibility for Microsoft Office 365 and Salesforce.com, apart from several other cloud-centric workloads. Similarly, Metallic Cloud Storage services complement hybrid use-cases of enterprise customers looking for the much-needed logically segmented and air-gapped data of a secondary or tertiary copy. MCSS storage provides customers the peace of mind and the assurance that, with the abstraction of access and additional security layers, complete with data encryption at rest and in-flight, their data is immutable.<\/li>\n<\/ul>\n\n\n\n<p class=\"\">With backup copies becoming the \u201cinsurance policy\u201d for enterprises to recover from, data immutability is critical.<\/p>\n\n\n\n<p class=\"\">Customers have an array of capabilities built into Commvault software that complement anomaly detection and notification mechanisms, making it a secure and cyber-ready data protection solution. As described by the NIST Cybersecurity Framework, enterprises are fast aligning themselves to the \u201cDefense in Depth\u201d strategy. When extended to data protection and management environments, the same framework helps achieve desired levels of immutability and security without compromising recovery, performance, and cost.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-best-practices-for-security-and-backup-data-immutability\"><strong>Best Practices for Security and backup data immutability<\/strong><\/h3>\n\n\n\n<p class=\"\">Immutability is defined as the ability of any data to be maintained in a non-fungible state for a specific duration of time. Data immutability can be attained via various methods working in conjunction with each other.<\/p>\n\n\n\n<p class=\"\">Here are the key best practices recommended by Commvault to achieve security and backup data immutability:<\/p>\n\n\n\n<p class=\"\">1. Have a tighter grip on Role-Based Access Controls to ensure only resources within the organization have access to backup repositories. Coupled with multi-factor authentication (MFA) and Multi-person authentication, this ensures protection against rogue admin or compromised admin credentials. Answering basic questions like \u201cWho has access to what and why?\u201d helps guide the Role-based Access Control (RBAC) principles. This aligns with Least Privilege Access guidelines.<\/p>\n\n\n\n<p class=\"\">2. Protect against \u201crogue admin\u201d or \u201ccompromised admin credentials\u201d wreaking havoc on your Commvault environment by enabling Commvault Retention Lock on the policies (formerly known as WORM Copy). Once enabled on a policy, this software level locking configuration helps protect against accidental or intentional deletions or changes to the policy retention, deleted jobs or unmounted\/dropped libraries, by anyone including admins.<\/p>\n\n\n\n<p class=\"\">3. Encryption is a default setting for Commvault. Data at rest and in-flight is encrypted and assures the backup data, even if exfiltrated, is rendered useless to bad actors without the decryption keys. Additionally, since data written by Commvault is in deduplicated chunks, the blocks of data are not of any use to bad actors in the event of Double Extortion Ransomware threats.<\/p>\n\n\n\n<p class=\"is-style-large\"><meta charset=\"utf-8\"><strong>Commvault\u2019s integration with and support for 3<sup>rd<\/sup> party Key Management Servers provides an additional layer of security.<\/strong><\/p>\n\n\n\n<p class=\"\">4. Commvault\u2019s Ransomware Lock protects on-premises data mover mount paths, wherever relevant. This ensures data can be written into the target disk storage only by Commvault and Commvault approved processes, thus rendering the mount path inaccessible to read, writes, and updates any non-Commvault process, hence immutable.<\/p>\n\n\n\n<p class=\"\">5. With Commvault HyperScale X, customers gain tighter OS-level data protection that blocks users and\/or <a href=\"https:\/\/www.commvault.com\/blogs\/ransomware-protection#attack\">ransomware attacks<\/a> from bypassing other security layers through access controls. Under the hood, HyperScale X engages SELinux to enhance immutability by providing access policies restricting file modifications or disk-level activity, such as reformatting drives. Most importantly, HyperScale X powered by Commvault\u2019s integrated scale-out file system provides additional immutability at the storage layer. This ensures that data in backup repositories cannot be modified or encrypted at the file system level. This capability is enabled by default.<\/p>\n\n\n\n<p class=\"\">6. Access to cloud storage services is authenticated just before backup jobs are triggered. &nbsp;This also aligns closely with Zero Trust architecture, which mandates all communication channels be \u201cChallenged\u201d and then \u201cVerified,\u201d thus negating the notion of persistence.<\/p>\n\n\n\n<p class=\"\">7. Commvault also allows leveraging time\u2013based retention lock (WORM immutable lock) on Cloud Object storage and on-premises object storage that support it. Backup copies placed in cloud storage, where a time-based retention lock is applied, cannot be deleted or updated by any process or persons, including Cloud IaaS vendors until retention is met.<\/p>\n\n\n\n<p class=\"\">8. Network topologies recommended by Commvault emphasize \u201cPull\u201d architecture vs. \u201cPush\u201d thus, adhering to the principles of Zero Trust architecture. Push architecture relies on the persistence of connection and has the potential for malware to infiltrate through this always-on connection; however, in \u201cPull\u201d architecture, connection to the clients is periodic, which requires a request for access, authentication of access, and finally resulting in \u201cpulling\u201d of data and events.<\/p>\n\n\n\n<p class=\"\">9. For Metallic Cloud Storage Services, the Metallic storage subscription is abstracted away from the customers, as they have visibility only to their Metallic Storage account and not the Metallic subscription. This layer of abstraction, when used in conjunction with Commvault Retention Lock, provides a secure and immutable copy of data on MCSS.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Key Architecture Considerations for Immutability<\/strong><\/h3>\n\n\n\n<p class=\"\">One of the frequently asked questions is, how do we architect the right fit for a given environment with all these capabilities? What are the key architecture considerations when designing a hybrid environment while balancing security, cost, and performance parameters?<\/p>\n\n\n\n<p class=\"\">Include these elements in your immutability architecture<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li class=\"\">Access locks to isolate copy store against Ransomware<\/li>\n\n\n\n<li class=\"\">Immutability with lifecycle locks to reduce risks, balanced with consumption impact<\/li>\n\n\n\n<li class=\"\">Air-gap isolation network and controls<\/li>\n\n\n\n<li class=\"\">Configuration governance to protect against intentional or accidental changes<\/li>\n\n\n\n<li class=\"\">Recovery concurrent performance &#8211; reduce latency with due importance to speed and cost impact<\/li>\n\n\n\n<li class=\"\">Automatic patching to stay current, simplifying management and maintenance of data protection infrastructure<\/li>\n\n\n\n<li class=\"\">3-2-1 Offsite vaulted copy<\/li>\n<\/ol>\n\n\n\n<p class=\"\">The image below illustrates these salient points that can serve as a quick and easy guide.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" src=\"https:\/\/www.commvault.com\/wp-content\/uploads\/2021\/10\/image-6.png\" alt=\"\" class=\"wp-image-46095\" style=\"width:671px;height:378px\"\/><\/figure><\/div>\n\n\n<p class=\"\">To learn more about Commvault immutability, read <a href=\"https:\/\/www.commvault.com\/resources\/solution-brief\/commvaults-immutable-infrastructure-architecture\">Commvault&#8217;s immutable infrastructure architecture<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Constantly in step with the changing times, Commvault, armed with 25 years of experience in the data protection and management arena, helps customers recover their data and bounce back from cyber and disaster recovery (DR) crises via a multi layered security approach. <\/p>\n","protected":false},"author":85,"featured_media":64373,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_custom_css":"","_custom_js_footer":"","_page_background_color":"","_remove_from_search":false,"_dark_mode":false,"_light_footer_mode":false,"_sidebar_form":{"id":"","name":"","cta":"","redirect":""},"_alert_notification_bar":{"show":true,"bg_color":"","content":"","call_to_action_label":"","call_to_action_link":""},"_footer_cta":{"show":false,"title":"","subtitle":"","cta_text":"","cta_link":"","background":{"id":0,"url":""}},"_cmv_customer_logo":{"id":0,"url":""},"_jetpack_memberships_contains_paid_content":false,"i18n_hreflangs":"","footnotes":""},"categories":[716,713,678],"tags":[],"cmv_author":[879],"class_list":{"0":"post-46093","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-hyperscale-x","8":"category-metallic-category","9":"category-ransomware","10":"cmv_author-vidya-shankaran","11":"entry"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.0 (Yoast SEO v23.0) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Ransomware Defense in Depth \u2013 Best Practices for Security and Backup Data Immutability<\/title>\n<meta name=\"description\" content=\"Constantly in step with the changing times, Commvault, armed with 25 years of experience in the data protection and management arena, helps customers recover their data and bounce back from cyber and disaster recovery (DR) crises via a multi layered security approach.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ransomware Defense in Depth \u2013 Best Practices for Security and Backup Data Immutability\" \/>\n<meta property=\"og:description\" content=\"Constantly in step with the changing times, Commvault, armed with 25 years of experience in the data protection and management arena, helps customers recover their data and bounce back from cyber and disaster recovery (DR) crises via a multi layered security approach.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth\" \/>\n<meta property=\"og:site_name\" content=\"Commvault - English - United States\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Commvault\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-10-18T13:37:48+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-01-03T18:52:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/blog-data_.png\" \/>\n\t<meta property=\"og:image:width\" content=\"957\" \/>\n\t<meta property=\"og:image:height\" content=\"548\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"dpauciullo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@commvault\" \/>\n<meta name=\"twitter:site\" content=\"@commvault\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"dpauciullo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ransomware Defense in Depth \u2013 Best Practices for Security and Backup Data Immutability","description":"Constantly in step with the changing times, Commvault, armed with 25 years of experience in the data protection and management arena, helps customers recover their data and bounce back from cyber and disaster recovery (DR) crises via a multi layered security approach.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth","og_locale":"en_US","og_type":"article","og_title":"Ransomware Defense in Depth \u2013 Best Practices for Security and Backup Data Immutability","og_description":"Constantly in step with the changing times, Commvault, armed with 25 years of experience in the data protection and management arena, helps customers recover their data and bounce back from cyber and disaster recovery (DR) crises via a multi layered security approach.","og_url":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth","og_site_name":"Commvault - English - United States","article_publisher":"https:\/\/www.facebook.com\/Commvault\/","article_published_time":"2021-10-18T13:37:48+00:00","article_modified_time":"2024-01-03T18:52:34+00:00","og_image":[{"width":957,"height":548,"url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/blog-data_.png","type":"image\/png"}],"author":"dpauciullo","twitter_card":"summary_large_image","twitter_creator":"@commvault","twitter_site":"@commvault","twitter_misc":{"Written by":"dpauciullo","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth#article","isPartOf":{"@id":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth"},"author":{"name":"dpauciullo","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/person\/0d027e3bbfd09715cc267f372fdc4c7e"},"headline":"Ransomware Defense in Depth \u2013 Best Practices for Security and Backup Data Immutability","datePublished":"2021-10-18T13:37:48+00:00","dateModified":"2024-01-03T18:52:34+00:00","mainEntityOfPage":{"@id":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth"},"wordCount":1429,"publisher":{"@id":"https:\/\/commvault-new.go-vip.net\/#organization"},"image":{"@id":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth#primaryimage"},"thumbnailUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/blog-data_.png","articleSection":["Hyperscale X","Metallic","Ransomware"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth","url":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth","name":"Ransomware Defense in Depth \u2013 Best Practices for Security and Backup Data Immutability","isPartOf":{"@id":"https:\/\/commvault-new.go-vip.net\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth#primaryimage"},"image":{"@id":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth#primaryimage"},"thumbnailUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/blog-data_.png","datePublished":"2021-10-18T13:37:48+00:00","dateModified":"2024-01-03T18:52:34+00:00","description":"Constantly in step with the changing times, Commvault, armed with 25 years of experience in the data protection and management arena, helps customers recover their data and bounce back from cyber and disaster recovery (DR) crises via a multi layered security approach.","breadcrumb":{"@id":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth#primaryimage","url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/blog-data_.png","contentUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/blog-data_.png","width":957,"height":548},{"@type":"BreadcrumbList","@id":"https:\/\/www.commvault.com\/blogs\/ransomware-defense-in-depth#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.commvault.com\/"},{"@type":"ListItem","position":2,"name":"Ransomware Defense in Depth \u2013 Best Practices for Security and Backup Data Immutability"}]},{"@type":"WebSite","@id":"https:\/\/commvault-new.go-vip.net\/#website","url":"https:\/\/commvault-new.go-vip.net\/","name":"Commvault - English - United States","description":"","publisher":{"@id":"https:\/\/commvault-new.go-vip.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/commvault-new.go-vip.net\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/commvault-new.go-vip.net\/#organization","name":"Commvault","url":"https:\/\/commvault-new.go-vip.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/logo\/image\/","url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/03\/logo-commvault-horizontal.jpg?quality=80","contentUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/03\/logo-commvault-horizontal.jpg?quality=80","width":1200,"height":628,"caption":"Commvault"},"image":{"@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Commvault\/","https:\/\/x.com\/commvault","https:\/\/www.instagram.com\/commvault\/","https:\/\/www.linkedin.com\/company\/commvault","https:\/\/www.youtube.com\/user\/commvault","https:\/\/en.wikipedia.org\/wiki\/Commvault"]},{"@type":"Person","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/person\/0d027e3bbfd09715cc267f372fdc4c7e","name":"dpauciullo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/26a1c2b1eb2dd35e14333ef22306348e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/26a1c2b1eb2dd35e14333ef22306348e?s=96&d=mm&r=g","caption":"dpauciullo"}}]}},"jetpack_featured_media_url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/blog-data_.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts\/46093","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/users\/85"}],"replies":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/comments?post=46093"}],"version-history":[{"count":13,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts\/46093\/revisions"}],"predecessor-version":[{"id":505682,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts\/46093\/revisions\/505682"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/media\/64373"}],"wp:attachment":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/media?parent=46093"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/categories?post=46093"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/tags?post=46093"},{"taxonomy":"cmv_author","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/cmv_author?post=46093"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}