Skip to main content
Live webinar · Nov 3Register free →
Skip to main content

Guides/Hospitality, gaming & entertainment

Where your data lives, and what it takes to get it back.

Casinos, resorts, hotels and venues run on systems that can't all stop at once. Here's what breaks without each one, and the order to bring them back after an attack.

Download the PDF · 2 pagesTalk to an engineer
An empty aisle on a modern casino floor, rows of curved slot machine screens with violet edge lighting receding into the distance

Where your data lives

Eight systems, and what breaks without each one.

SystemIf it's down
Property managementFront desk goes to paper.
Casino management and player trackingCan't rate play or issue comps.
Cage and countCash handling and reporting stall.
Loyalty and CRMGuest PII and point balances: what attackers ransom.
Point of sale and paymentsOutlets go cash-only.
Surveillance videoFootage your regulator requires you to keep.
Ticketing and eventsBox office and gates stall.
Active Directory and Entra IDNobody signs in to anything above.

Recovery order

What to bring back first.

An example order after ransomware. Write yours down and test it.
  1. 01

    Identity

    So staff can sign in.

  2. 02

    Core infrastructure

    Network, DNS, virtualization.

  3. 03

    Money in

    POS, payments, the cage.

  4. 04

    Guest systems

    PMS, casino management, ticketing.

  5. 05

    Loyalty and CRM

    From a known-clean copy.

  6. 06

    Back office

    Everything that can wait a day.

Regulation it touches

The rules it touches.

StandardWhat it covers
NIGC MICS25 CFR Part 543 sets IT controls for Tribal gaming.
Tribal internal controlsSet by each Tribal gaming commission.
State gaming rulesTechnology and record-keeping for commercial casinos.
PCI DSSCardholder data in backups stays in scope.

After an attack

Recover clean, and test it far more often.

Recovering into an isolated cleanroom, from a known-clean copy, keeps the attacker out of the restored floor, front desk and payment systems. An independent analysis of Commvault Cleanroom Recovery and Cloud Rewind found:
99%
faster recovery
94%
faster rebuild
30×
more frequent recovery testing
Source: ESG, “Analyzing the Economic Benefits of Commvault Cleanroom and Cloud Rewind.”

Check your setup

Eight questions to ask before the next incident.

Any you can't answer with confidence is a gap.
  1. 01

    Is there a copy an attacker with admin rights can't delete?

  2. 02

    Can you restore Active Directory first?

  3. 03

    Is your recovery order written down, and tested?

  4. 04

    Do backups cover your full video retention period?

  5. 05

    Do you know where cardholder data sits in your backups?

  6. 06

    Could a fake help desk reset reach your backups?

  7. 07

    Can cloud booking and ticketing apps roll back to a clean point?

  8. 08

    Who runs the restore at 3 a.m. on a holiday weekend?

Commvault customers

What always-on operators report.

Commvault customers, as reported by Commvault.
CustomerResult
Global cruise line< 15 min failover and failback RTO
Global entertainment company6,500+ AWS resources protected
BookMyShow< 2 hours recovery from disasters

How KELYN delivers it

Commvault protects the data. KELYN runs the recovery.

  1. 01

    Copies they can't touch

    Immutable and air-gapped, with keys only you hold.

  2. 02

    Identity first

    Active Directory and Entra ID back before anything else.

  3. 03

    Clean recovery

    Restores that don't bring the attacker back.

  4. 04

    U.S.-based engineers

    KELYN runs and tests the restores with you.

Talk to a KELYN recovery engineer.

We'll map your systems, your properties and your current copies, and help you write a recovery order you can test.

Talk to an expertDownload the guide (PDF)

Related solutions