Disaster Disaster Prevention and Prevention and RecoveryRecoveryPresented By: Sean Snodgrass and Theodore SmithPresented By: Sean Snodgrass and Theodore Smith
Learning ObjectivesLearning Objectives
Define Disaster Prevention and Recovery and Define Disaster Prevention and Recovery and Business Continuity PlanningBusiness Continuity Planning
Identify their usesIdentify their uses Learn the importance of DRP, important Learn the importance of DRP, important
considerations, and statisticsconsiderations, and statistics Recognize different levels and solutionsRecognize different levels and solutions Advantages and disadvantagesAdvantages and disadvantages ActivityActivity
Definition Definition
Disaster Prevention (DP): Disaster Prevention (DP): The process of minimizing the risk of a The process of minimizing the risk of a
disaster occurring. Pre-disaster steps disaster occurring. Pre-disaster steps taken.taken.
Disaster Recovery (DR):Disaster Recovery (DR):
The process of minimizing business The process of minimizing business operation downtime in the event of a operation downtime in the event of a
disaster. Post-disaster steps taken.disaster. Post-disaster steps taken.
DefinitionDefinition
Business Continuity Planning: Business Continuity Planning:
A practiced logical plan for how a A practiced logical plan for how a company will recover and restore data in company will recover and restore data in a specified period of time after a disaster.a specified period of time after a disaster.
Types of DisastersTypes of Disasters
Serious information security incidents Serious information security incidents
Equipment or system failure Equipment or system failure
Loss of utilities and servicesLoss of utilities and services
Organized and/or deliberate disruptionOrganized and/or deliberate disruption
Environmental disasters Environmental disasters
UsesUses
Personal (Mozy Online Backup)Personal (Mozy Online Backup) Business (offsite data centers)Business (offsite data centers) Law Firms (Sarbanes-Oxley Act)Law Firms (Sarbanes-Oxley Act) Government Government Universities (here at OSU)Universities (here at OSU)
Why is DRP important?Why is DRP important?
Integral to business longevityIntegral to business longevity
Useful toolUseful tool
Mandated by lawMandated by law
Employee trainingEmployee training
Statistics
Veritas Software, a subsidiary of Symantec, conducted a survey of more than 1,200 global managers in 2004
What would be the most devastating effects of a disaster for a company?
Source: http://www.processor.com/articles//P2641/04p41/04p41graphic.pdf?guid=BF210C8BB27D4313982642EC80117A44
Statistics
Only 38% of companies had DR or BC Nearly 20% said company would be at
stake 51% of respondents with DR had used
their recovery plan within the past year. Computer failure, hackers, viruses
accounted for 63% of used plans
Statistics
More than 40% would have no idea how to resume business if primary data center lost.
On average, 72 hours to recover basic business functions after a fire.
$78,000 lost per hour on average (Disaster Recovery Journal estimate)
Source: http://www.processor.com/articles//P2641/04p41/04p41graphic.pdf?guid=BF210C8BB27D4313982642EC80117A44
Gartner Survey, Oct. 2005
Picture Source: Witty, Roberta J. Disaster Recovery Journal, Fall 2005. Volume 19, Issue 4
StatisticsStatistics
How often do you think most companies How often do you think most companies test their recovery systems?test their recovery systems?
AnnuallyAnnually Semi-annuallySemi-annually QuarterlyQuarterly NeverNever
Picture Source: Witty, Roberta J. Disaster Recovery Journal, Fall 2005. Volume 19, Issue 4
Considerations
Costs Threats and BIA Mission critical business functions Recovery Time Objective (RTO) Recovery Point Objective (RPO) Systems People
Source: http://www.stanford.edu/dept/EHS/prod/general/erprep/BCP_guide.doc
DRP Solutions
Data storage/duplication methods Tape backup Electronic vaulting Periodic data backup Mirroring
Picture Source: www.netgainit.com/Page.aspx?pageID=21
DRP Solutions
Software Facilitates data and systems recovery Automated or user commanded
synchronization. Also used in BCP
DRP Solutions
Cold site Offsite storage facility with basic
infrastructure No data recovery Long recovery time Low cost
Source: Processor Editorial Article “Hot, Warm, or Cold,” September 2004. Vol. 17 Issue 35:http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp
Picture Source:pulickal.files.wordpress.com/.../emptyrm-b.jpg
DRP Solutions
Hot site Offsite facility, fully mirrored data center Minimal data loss Nearly instantaneous recovery High cost
Source: Processor Editorial Article “Hot, Warm, or Cold,” September 2004. Vol. 17 Issue 35:http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp
Picture source: http://www.another9.com/uploads/hotsite.gif
DRP Solutions
Warm site In between hot and cold sites Partially functional data center Periodic data replication Lower cost relative to hot sites
Source: Processor Editorial Article “Hot, Warm, or Cold,” September 2004. Vol. 17 Issue 35:http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp
DRP Solutions
Mobile On-site Mobile data center Flexible Limited space Suitable for smaller recoveries Keeps employees close to home
Picture source: http://www.rentsysrecovery.com/?PID=4
DRP Solutions
Quick-ship Solution implied in name Third-party vendor Temporarily leased equipment
Advantages and Advantages and DisadvantagesDisadvantages
Disadvantages: Disadvantages: Very costly (hospitals pay between 100-500 grand per Very costly (hospitals pay between 100-500 grand per
year)year) Needs constant maintenanceNeeds constant maintenance Will not be successful if everyone is not involvedWill not be successful if everyone is not involved Like insurance Like insurance
Advantages:Advantages: Saves huge amounts of money if a disaster occursSaves huge amounts of money if a disaster occurs Can be used to help other business functionsCan be used to help other business functions
ConclusionConclusion
DR is highly tailored to individual DR is highly tailored to individual company’s needscompany’s needs
DR implementation is on the rise, DR implementation is on the rise, trending towards warm sitestrending towards warm sites
When fully utilized can save companies When fully utilized can save companies moneymoney
Useful for anyone in the business world Useful for anyone in the business world to be aware ofto be aware of