Raiffeisen Informatik Cuts Mainframe Cyber Recovery from an Estimated Seven Days to Two Hours with Hitachi Vantara

Raiffeisen Informatik Cuts Mainframe Cyber Recovery from an Estimated Seven Days to Two Hours with Hitachi Vantara

PR Newswire

  • Seven days to two hours: Cyber resiliency architecture enables rapid recovery even after total storage loss across both data center sites
  • Two-hour recovery point: Immutable snapshots protect consistent application states while limiting potential data loss to the snapshot interval
  • Built for worst-case resilience: Hitachi Virtual Storage Platform architecture supports rigorous recovery testing aligned with the resilience objectives of the EU Digital Operational Resilience Act (DORA)

VIENNA and SANTA CLARA, Calif., Oct. 20, 2026 /PRNewswire/ — Raiffeisen Informatik GmbH & Co KG, one of Austria’s largest banking IT services providers, has implemented a cyber resiliency architecture for its mainframe environment in partnership with Hitachi Vantara, the data storage, infrastructure and hybrid cloud management subsidiary of Hitachi Ltd. (TSE: 6501). Powered by Hitachi Vantara’s Virtual Storage Platform (VSP) and based on immutable snapshots, the solution reduces recovery time in the worst-case scenario — the total loss of all storage systems across both data center sites — from an estimated seven days to between one and two hours. The architecture also limits potential data loss to two hours. The deployment illustrates how financial institutions can strengthen operational and cyber resilience by protecting critical data and validating recovery procedures against severe disruption scenarios. 

2023 Logo

To learn more about VSP One for Mainframe, visit:
https://www.hitachivantara.com/en-us/products/storage-platforms/vsp-one-block-mainframe 

The Vienna-based provider’s mainframe environment processes approximately one billion transactions per month for more than 1.25 million end customers. Raiffeisen Informatik operates the IT infrastructure for central institutions of the Raiffeisen Banking Group, including Raiffeisen Bank International (RBI), Raiffeisenlandesbank Niederösterreich-Wien, Raiffeisenlandesbank Burgenland, Raiffeisen Landesbank Vorarlberg, and the UNIQA insurance group. Before the project, Raiffeisen Informatik operated two production storage systems across two data center sites, supported by daily FlashCopies and batch backups written to a virtual tape library. The architecture met the four-hour recovery time objectives for standard failure scenarios.

The challenge emerged when Raiffeisen Informatik modeled the most severe scenario: an attacker destroying all storage systems across both data centers simultaneously. In that situation, a complete recovery from classical backup media was estimated to take approximately seven days. The potential impact of that kind of downtime is severe; a recent report found companies lose an average $300 million a year to unplanned outages, plus fines if they do not stay compliant with the EU Digital Operational Resilience Act (DORA), which requires business continuity.

In a 24/7 banking transaction environment, there is no straightforward point in time at which a consistent backup of the entire landscape can be created. Recovery would therefore require data to be reconstructed from individual tables and combined with forward-recovery procedures. For an interconnected core banking environment serving multiple financial institutions, such a recovery process would be highly complex and difficult to execute within the required timeframe.

Immutable Recovery with Hitachi Mainframe Cyber Resiliency Solution
To address this challenge, Raiffeisen Informatik deployed the Hitachi Mainframe Cyber Resiliency Solution, combining Hitachi Universal Replicator for continuous data replication with Hitachi ShadowImage for Mainframe for immutable snapshot creation.

Two NVMe-based Hitachi VSP arrays were installed as dedicated snapshot targets, complementing the existing Hitachi VSP systems at both mainframe sites. All systems are connected via dark fiber. The critical element of the architecture is the separation, or air gap, between production storage and the snapshot targets. The snapshot storage cannot be addressed by the mainframe production environment. As a result, an attacker with administrative access cannot see, modify or delete protected snapshots.

During their retention period, the snapshots are physically separated from the production environment and logically write-protected. New snapshots are created every two hours, providing consistent recovery points for the entire application environment. Importantly, recovery can be initiated directly from the snapshot without first having to copy all data back to the production storage infrastructure.

“Without Hitachi Vantara’s support, the solution simply wouldn’t have worked,” said Werner Georg Mayer, Managing Director at Raiffeisen Informatik. “What matters is that from a snapshot, we can bring up the entire application environment with a consistent data state in one to two hours. A traditional file- or database-level restore of the full application landscape would take days — and achieving a consistent state across all systems that way is barely achievable.”

Testing Resilience Under Extreme Conditions
The architecture gives Raiffeisen Informatik a recovery capability that goes beyond conventional disaster recovery scenarios. The company tests its recovery procedures annually in an isolated logical partition on the mainframe, completely segregated from the production network. This approach allows Raiffeisen Informatik to test recovery under conditions designed to reflect the most severe disruption scenarios, rather than relying solely on theoretical recovery procedures.

“Financial institutions need to know that their critical systems can be restored when conventional recovery assumptions fail,” said Octavian Tanase, Chief Product Officer, Hitachi Vantara. “Raiffeisen Informatik has taken a rigorous approach to cyber resilience by designing and testing for a total-loss scenario and testing recovery procedures under realistic conditions. Reducing an estimated seven-day recovery to as little as two hours is significant, but the value goes beyond faster recovery. It gives mainframe leaders confidence that mission-critical banking services can be restored when it matters most.”

The resulting architecture delivers a validated recovery path from severe cyber disruption scenarios – well within Raiffeisen Informatik’s contractual four-hour SLA under the tested total-loss scenario – while the two-hour snapshot interval defines the potential recovery point, limiting data loss exposure.

From Mainframe Resilience to Next-Generation Storage
The project was completed in approximately four months from order to production and was implemented jointly by Raiffeisen Informatik’s in-house team and Hitachi Vantara Professional Services. Building on this work, Raiffeisen Informatik has also signed a new agreement to add VSP One Block High End to its mainframe storage environment, helping prepare its infrastructure for future performance, resilience and scalability requirements.

“We have a clear view of what our mainframe environment needs to support the business going forward,” Mayer said. “Our storage infrastructure needs to keep pace with growing performance demands while giving us the flexibility to scale. VSP One Block High End gives us that foundation for the next phase of our mainframe strategy.”

For more information about Hitachi Vantara, please visit: https://www.hitachivantara.com/en-us/home.

Additional Resources

About Raiffeisen Informatik
Raiffeisen Informatik is one of Austria’s largest private data center operators and has provided corporate IT services for more than 50 years. Its primary customers include institutions of the Raiffeisen Banking Group Austria — among them Raiffeisen Bank International and the Raiffeisen Landesbanken — as well as the Uniqa insurance group. As a captive IT services provider, Raiffeisen Informatik has end-to-end responsibility for IT operations across mission-critical banking workloads. More info on https://www.raiffeiseninformatik.at/

About Hitachi Vantara
Hitachi Vantara is transforming the way data fuels innovation. A wholly owned subsidiary of Hitachi Ltd., Hitachi Vantara provides the data foundation the world’s leading innovators rely on. Through data storage, infrastructure systems, cloud management and digital expertise, the company helps customers build the foundation for sustainable business growth. To learn more, visit www.hitachivantara.com.

About Hitachi, Ltd. 
Through its Social Innovation Business (SIB) that brings together IT, OT (Operational Technology) and products, Hitachi aims to be a global leader in continuously transforming social infrastructure through digital, contributing to a harmonized society where the environment, wellbeing, and economic growth are in balance. Hitachi operates worldwide across four sectors – Digital Systems & Services, Energy, Mobility, and Connective Industries – as well as a Strategic SIB Business Unit focused on new growth areas. With Lumada at its core, Hitachi creates value by combining data, technology and domain knowledge to solve customer and social challenges. Revenues for FY2025 (ended March 31, 2026) totaled 10,586.7 billion yen, with 606 consolidated subsidiaries and approximately 290,000 employees worldwide. Visit us at www.hitachi.com.

HITACHI is a trademark or registered trademark of Hitachi, Ltd. All other trademarks, service marks, and company names are properties of their respective owners.

Cision View original content to download multimedia:https://www.prnewswire.com/news-releases/raiffeisen-informatik-cuts-mainframe-cyber-recovery-from-an-estimated-seven-days-to-two-hours-with-hitachi-vantara-302913474.html

SOURCE Hitachi Vantara