Disaster Disaster Prevention and Prevention and RecoveryRecoveryPresented By: Sean Snodgrass and Theodore SmithPresented By: Sean Snodgrass and Theodore Smith

Learning ObjectivesLearning Objectives

Define Disaster Prevention and Recovery and Define Disaster Prevention and Recovery and Business Continuity PlanningBusiness Continuity Planning

Identify their usesIdentify their uses Learn the importance of DRP, important Learn the importance of DRP, important

considerations, and statisticsconsiderations, and statistics Recognize different levels and solutionsRecognize different levels and solutions Advantages and disadvantagesAdvantages and disadvantages ActivityActivity

Definition Definition

Disaster Prevention (DP): Disaster Prevention (DP): The process of minimizing the risk of a The process of minimizing the risk of a

disaster occurring. Pre-disaster steps disaster occurring. Pre-disaster steps taken.taken.

Disaster Recovery (DR):Disaster Recovery (DR):

The process of minimizing business The process of minimizing business operation downtime in the event of a operation downtime in the event of a

disaster. Post-disaster steps taken.disaster. Post-disaster steps taken.

DefinitionDefinition

Business Continuity Planning: Business Continuity Planning:

A practiced logical plan for how a A practiced logical plan for how a company will recover and restore data in company will recover and restore data in a specified period of time after a disaster.a specified period of time after a disaster.

Types of DisastersTypes of Disasters

Serious information security incidents Serious information security incidents

Equipment or system failure Equipment or system failure

Loss of utilities and servicesLoss of utilities and services

Organized and/or deliberate disruptionOrganized and/or deliberate disruption

Environmental disasters Environmental disasters

UsesUses

Personal (Mozy Online Backup)Personal (Mozy Online Backup) Business (offsite data centers)Business (offsite data centers) Law Firms (Sarbanes-Oxley Act)Law Firms (Sarbanes-Oxley Act) Government Government Universities (here at OSU)Universities (here at OSU)

Why is DRP important?Why is DRP important?

Integral to business longevityIntegral to business longevity

Useful toolUseful tool

Mandated by lawMandated by law

Employee trainingEmployee training

Statistics

Veritas Software, a subsidiary of Symantec, conducted a survey of more than 1,200 global managers in 2004

What would be the most devastating effects of a disaster for a company?

Source: http://www.processor.com/articles//P2641/04p41/04p41graphic.pdf?guid=BF210C8BB27D4313982642EC80117A44

Statistics

Only 38% of companies had DR or BC Nearly 20% said company would be at

stake 51% of respondents with DR had used

their recovery plan within the past year. Computer failure, hackers, viruses

accounted for 63% of used plans

Statistics

More than 40% would have no idea how to resume business if primary data center lost.

On average, 72 hours to recover basic business functions after a fire.

$78,000 lost per hour on average (Disaster Recovery Journal estimate)

Source: http://www.processor.com/articles//P2641/04p41/04p41graphic.pdf?guid=BF210C8BB27D4313982642EC80117A44

Gartner Survey, Oct. 2005

Picture Source: Witty, Roberta J. Disaster Recovery Journal, Fall 2005. Volume 19, Issue 4

StatisticsStatistics

How often do you think most companies How often do you think most companies test their recovery systems?test their recovery systems?

AnnuallyAnnually Semi-annuallySemi-annually QuarterlyQuarterly NeverNever

Picture Source: Witty, Roberta J. Disaster Recovery Journal, Fall 2005. Volume 19, Issue 4

Considerations

Costs Threats and BIA Mission critical business functions Recovery Time Objective (RTO) Recovery Point Objective (RPO) Systems People

Source: http://www.stanford.edu/dept/EHS/prod/general/erprep/BCP_guide.doc

DRP Solutions

Data storage/duplication methods Tape backup Electronic vaulting Periodic data backup Mirroring

Picture Source: www.netgainit.com/Page.aspx?pageID=21

DRP Solutions

Software Facilitates data and systems recovery Automated or user commanded

synchronization. Also used in BCP

DRP Solutions

Cold site Offsite storage facility with basic

infrastructure No data recovery Long recovery time Low cost

Source: Processor Editorial Article “Hot, Warm, or Cold,” September 2004. Vol. 17 Issue 35:http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp

Picture Source:pulickal.files.wordpress.com/.../emptyrm-b.jpg

DRP Solutions

Hot site Offsite facility, fully mirrored data center Minimal data loss Nearly instantaneous recovery High cost

Source: Processor Editorial Article “Hot, Warm, or Cold,” September 2004. Vol. 17 Issue 35:http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp

Picture source: http://www.another9.com/uploads/hotsite.gif

DRP Solutions

Warm site In between hot and cold sites Partially functional data center Periodic data replication Lower cost relative to hot sites

Source: Processor Editorial Article “Hot, Warm, or Cold,” September 2004. Vol. 17 Issue 35:http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp

DRP Solutions

Mobile On-site Mobile data center Flexible Limited space Suitable for smaller recoveries Keeps employees close to home

Picture source: http://www.rentsysrecovery.com/?PID=4

DRP Solutions

Quick-ship Solution implied in name Third-party vendor Temporarily leased equipment

Advantages and Advantages and DisadvantagesDisadvantages

Disadvantages: Disadvantages: Very costly (hospitals pay between 100-500 grand per Very costly (hospitals pay between 100-500 grand per

year)year) Needs constant maintenanceNeeds constant maintenance Will not be successful if everyone is not involvedWill not be successful if everyone is not involved Like insurance Like insurance

Advantages:Advantages: Saves huge amounts of money if a disaster occursSaves huge amounts of money if a disaster occurs Can be used to help other business functionsCan be used to help other business functions

ConclusionConclusion

DR is highly tailored to individual DR is highly tailored to individual company’s needscompany’s needs

DR implementation is on the rise, DR implementation is on the rise, trending towards warm sitestrending towards warm sites

When fully utilized can save companies When fully utilized can save companies moneymoney

Useful for anyone in the business world Useful for anyone in the business world to be aware ofto be aware of