Disaster Prevention and Recovery

Presented By: Sean Snodgrass and Theodore Smith

Learning Objectives
Define Disaster Prevention and Recovery and Business Continuity Planning Identify their uses Learn the importance of DRP, important considerations, and statistics Recognize different levels and solutions Advantages and disadvantages Activity

Definition
Disaster Prevention (DP): The process of minimizing the risk of a disaster occurring. Pre-disaster steps taken.
Disaster Recovery (DR): The process of minimizing business operation downtime in the event of a disaster. Post-disaster steps taken.

Definition
Business Continuity Planning:
A practiced logical plan for how a company will recover and restore data in a specified period of time after a disaster.

Types of Disasters
Serious information security incidents
Equipment or system failure

Loss of utilities and services

Organized and/or deliberate disruption Environmental disasters

Uses
Personal (Mozy Online Backup) Business (offsite data centers) Law Firms (Sarbanes-Oxley Act) Government Universities (here at OSU)

Why is DRP important?

Integral to business longevity
Useful tool Mandated by law Employee training

Statistics
Veritas Software, a subsidiary of Symantec, conducted a survey of more than 1,200 global managers in 2004 What would be the most devastating effects of a disaster for a company?

Source: http://www.processor.com/articles//P2641/04p41/04p41graphic.pdf?guid=BF210C8BB27D4313982642EC80117A44

Statistics
Only 38% of companies had DR or BC Nearly 20% said company would be at stake 51% of respondents with DR had used their recovery plan within the past year.
Computer failure, hackers, viruses accounted for 63% of used plans

Statistics
More than 40% would have no idea how to resume business if primary data center lost. On average, 72 hours to recover basic business functions after a fire. $78,000 lost per hour on average (Disaster Recovery Journal estimate)

Source: http://www.processor.com/articles//P2641/04p41/04p41graphic.pdf?guid=BF210C8BB27D4313982642EC80117A44

Gartner Survey, Oct. 2005

Picture Source: Witty, Roberta J. Disaster Recovery Journal, Fall 2005. Volume 19, Issue 4

Statistics
How often do you think most companies test their recovery systems?
Annually Semi-annually Quarterly Never

Picture Source: Witty, Roberta J. Disaster Recovery Journal, Fall 2005. Volume 19, Issue 4

Considerations
Costs Threats and BIA Mission critical business functions Recovery Time Objective (RTO) Recovery Point Objective (RPO) Systems People

Source: http://www.stanford.edu/dept/EHS/prod/general/erprep/BCP_guide.doc

DRP Solutions
Data storage/duplication methods
Tape backup Electronic vaulting Periodic data backup Mirroring

Picture Source: www.netgainit.com/Page.aspx?pageID=21

DRP Solutions
Software
Facilitates data and systems recovery Automated or user commanded synchronization. Also used in BCP

DRP Solutions
Cold site
Offsite storage facility with basic infrastructure No data recovery Long recovery time Low cost

Picture Source:pulickal.files.wordpress.com/.../emptyrm-b.jpg Source: Processor Editorial Article Hot, Warm, or Cold, September 2004. Vol. 17 Issue 35: http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp

DRP Solutions
Hot site
Offsite facility, fully mirrored data center Minimal data loss Nearly instantaneous recovery High cost

Source: Processor Editorial Article Hot, Warm, or Cold, September 2004. Vol. 17 Issue 35: http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp

Picture source: http://www.another9.com/uploads/hotsite.gif

DRP Solutions
Warm site
In between hot and cold sites Partially functional data center Periodic data replication Lower cost relative to hot sites

Source: Processor Editorial Article Hot, Warm, or Cold, September 2004. Vol. 17 Issue 35: http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp

DRP Solutions
Mobile On-site
Mobile data center Flexible Limited space Suitable for smaller recoveries Keeps employees close to home

Picture source: http://www.rentsysrecovery.com/?PID=4

DRP Solutions
Quick-ship
Solution implied in name Third-party vendor Temporarily leased equipment

Advantages and Disadvantages

Disadvantages: Very costly (hospitals pay between 100-500 grand per year) Needs constant maintenance Will not be successful if everyone is not involved Like insurance
Advantages: Saves huge amounts of money if a disaster occurs Can be used to help other business functions

Conclusion
DR is highly tailored to individual companys needs DR implementation is on the rise, trending towards warm sites When fully utilized can save companies money Useful for anyone in the business world to be aware of