Fulcrum Group- Layer Your DR/BC
1 like346 views
This document discusses business continuity and disaster recovery strategies for organizations. It defines key terms like disaster, business continuity, and disaster recovery. It outlines different types of natural and man-made disasters and incidents that can impact operations. The document recommends that organizations establish recovery point and recovery time objectives and layer their continuity strategies. It also provides guidance on business continuity planning for small to medium businesses.
Fulcrum Group- Layer Your DR/BC
- 1. The Fulcrum Group Resiliency and Recovery Technologies By Steve Meek, CISSP, MCSE, CCNA
- 2. Agenda Definitions Disasters and Incidents Why DR-BC Enterprise DR-BC SMB DR-BC Layer your Business Continuity Exercise Summary
- 3. Definitions Disaster A sudden, unplanned calamitous event causing great damage or loss. Any event that creates an inability on an organization’s part to provide the critical business functions for some predetermined period of time Business Continuity The ability of an organization to continue to function even after a disastrous event, usually through the deployment of redundant hardware and software, the use of fault tolerant systems, as well as a solid backup and recovery strategy. Disaster Recovery The ability to recover from the loss of a complete site, whether due to natural disaster or malicious intent. Disaster recovery strategies include replication and backup/restore.
- 4. Disasters Natural Disasters Tornadoes, Hurricanes, Wildfires, Thunderstorms & lightning Problem caused: electrical power loss Man-made Disasters Plane crash, Hazardous Materials, House & Building fires, Nuclear power plant emergencies, Terrorism Problem caused: system unavailability, lack of access
- 5. Incidents Higher probability IT issues Accidental Deletion/Modification of Critical Data Losing a laptop Network Failure Systems Software Failure Hard Disk Subsystem Failure Server Failure Power Crisis Theft or Sabotage Virus Attack Other security issue or attack Problems caused: varies
- 6. Enterprise DR-BC Minimizing risk After a major disaster an average company will lose at least 25 percent of the daily revenue in the first six days. (source: University of Texas) Data is growing 50-80% per year (source: Gartner)
- 7. DR-BC Loss Areas Indirect Costs Stock Price Reputation Market Share Brand Equity Customer Satisfaction Direct Costs Lost Revenue Lost Productivity Criminal Liability More Than Revenue at Risk
- 8. DR-BC Planning Benefits Minimizes potential economic loss and provide a sense of security Reduce disruptions to operations Minimizes the risk of delays and decision making Provides for an orderly recovery Reduces reliance on key employees Ensures the safety of employees and customers
- 9. DR-BC Recovery Needs Amount of data loss acceptable The point to which data must be restored RECOVERY POINT OBJECTIVE Amount of time it takes to come back online The time by which data must be restored RECOVERY TIME OBJECTIVE Days Mins Hrs Wks Secs Recovery Point Mins Days Hrs Secs Wks Recovery Time
- 10. Recovery Tools Days Mins Hrs Wks Secs Mins Days Hrs Secs Wks Tape Restore Clustering Snapshots Replication Tape Backup Periodic Replication Snapshots HA Zone Recovery Point Recovery Time
- 11. Typical BCP No strategies or plans. Little if any awareness. Focused on technology. Aware and acknowledge the need. DR plans documented. Strategies developed for some systems. Cross enterprise recovery requirements understood. Business Continuity Program in Place. Business alignment Executive focus Crisis Mgt. Process Regular testing Multi point RTO / RPO Regulatory and Supply Chain compliance Value Derived with Customers Business Requirement Validated Monitored Executive Dashboard High Low Medium Mature World Class Aware Capable Unfocused Each one of these maturity levels has different characteristics, techniques that are used and approaches.
- 12. SMB DR-BC Planning Network share is the most popular and least effective. Backup should be the last line of defense Network Share 55% Users Copy Locally 7% PC Backup Software 7% Synch Products 4% Software Solution 6% Server Backup 6% No Solution 15%
- 13. SMBs and Backups Usually only backup provide: Cost-effective portability of data Protection against complete data loss Protection against viruses and data corruption Managed multiple point-in-time copies of data Integrated desktop/laptop protection Success requires you Check logs and ensure critical data included Conduct periodic test restores Use agents to capture “data in motion” Backup does not provide Instant access to data (short RTO) Minimum data loss (short RPO)
- 14. Layer your Business Continuity Cabling and Power Infrastructure Servers and services PC and peripherals Applications and Training Network Monitoring and Management
- 15. Resiliency Levels Resiliency- Returning to original state Internal Resiliency- Ability to recover, handling internal issues Intra-site Resiliency- Ability to recover, handling issues with solutions at local site Inter-site Resiliency- Ability to recover, handling issues that may impact local site (using 2 nd site or collocation facility)
- 16. Exercise Let’s build a company and protect it’s assets
- 17. Summary Start with Executive sponsorship If struggling to get buy-in, focus on incidents, instead of disasters Understand the importance of RPO and RTO Don’t over rely on backups (last resort) Layer your DR-BC environment for better resiliency Get started today Audit your backups Create System Documentation Evaluate your resiliency Think off-site for documentation, tapes, software media Know when there is an issue- use event logs, syslogs, monitors,
- 18. Questions and Giveaway Any questions? The Fulcrum Group 5600 Egg Farm Road, Suite 452, Keller, TX 76248 Phone: 817-337-0300 Web: www.fulcrumgroup.net