• Share
  • Email
  • Embed
  • Like
  • Save
  • Private Content
Research roundup  business continuity management and it disaster recovery management 2 q12
 

Research roundup business continuity management and it disaster recovery management 2 q12

on

  • 1,422 views

 

Statistics

Views

Total Views
1,422
Views on SlideShare
1,422
Embed Views
0

Actions

Likes
1
Downloads
47
Comments
0

0 Embeds 0

No embeds

Accessibility

Categories

Upload Details

Uploaded via as Adobe PDF

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

    Research roundup  business continuity management and it disaster recovery management 2 q12 Research roundup business continuity management and it disaster recovery management 2 q12 Document Transcript

    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... This research note is restricted to the personal use of Aristotle Castro (accastro@gwu.edu). Research Roundup: Business Continuity Management and IT Disaster Recovery Management, 2Q12 30 August 2012 | ID:G00237631 Roberta J. Witty Business continuity management and IT disaster recovery management are cross- disciplinary topics that must be addressed by managers in multiple corporate roles. Gartners research Roundup provides business and IT leaders with guidance to keep up with the important BCM practices and latest trends. Analysis In this climate of almost unprecedented uncertainty and risk, business and IT leaders, and many other enterprise stakeholders, have urgent questions — reflected in Gartner client inquiries — about these crucial practices and the tools, technologies and processes that enable them. Gartner has a comprehensive body of research into business continuity management (BCM) and IT disaster recovery management (IT DRM), offering strategic insight, as well as tactical guidance, in virtually every area of these fields. The research is designed to enable enterprises of every size, type and industry to ensure true business resiliency during and after even the most traumatic crisis. This Roundup — an update from "Research Roundup: Business Continuity Management and IT Disaster Recovery Management, 4Q11" — provides a guide to all of our research from the past several years, including the most recent, important and foundational research on BCM and IT DRM, including reports regarding special events such as the 2012 Gartner Security and Risk Management Survey, the March 2011 Japan earthquake/tsunami, the 2009 bushfire in Australia, Case Studies, Cool Vendors reports, Hype Cycles, Magic Quadrants, MarketScopes, Predicts reports and Toolkits. Use the advice to select, implement, improve, mature and optimize your BCM and IT DRM programs and solutions (see Note 1 and Note 2). To make the research easy to find, we continue to modify the organization of the Roundup reports. In this 2Q12 Roundup, we organized and numbered the research into eight categories: BCM foundational research Gartner-branded research such as Cool Vendors, Hype Cycles, Magic Quadrants and MarketScopes, Predicts, survey reports, and SWOT (strength, weakness, opportunity and threat) analyses (we only report the past three years, because branded research is typically more time-specific than other research) BCM Event-based research (the 2011 Fukushima earthquake/tsunami, 2009 Australian bushfire, Hurricane Katrina and all pandemic planning research) IT DRM1 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... National protection Supply chain availability Vertical industries, and small and midsize businesses (SMBs) There is some duplication of research references because a piece of research may apply to more than one subcategory. We have tried to minimize the duplication, but we also want to ensure that the research is easily found by our clients. 1 BCM Foundational Research 1.1 Read First "Agenda for Security and Risk Management, 2012" "Business Continuity Management Defined, 2008" "Toolkit: 2011 BCM Program Overview, Key Issue 1; How Has the Role of the Business Continuity Manager Evolved During the Past 20 Years?" "Toolkit: 2011 BCM Program Overview, Key Issue 2; How Can Businesses Build Resilience Into Their Structures and Operations?" "Toolkit: 2011 BCM Program Overview, Key Issue 3; How Can Organizations Mature Their BCM Programs?" 1.2 Essential Research "Business Continuity Management Key Initiative Overview" "Applying Lessons Learned From Catastrophic Events in the Decade Since 9/11 to Improve Your BCM Program" "Avoid the Grim Reaper Syndrome: Integrate Recovery and Resilience Into the Project Life Cycle" "Design Coordination and the Service Design Package" "Designing IT Services for Operations" "Best Practices for Conducting a Business Impact Analysis" "Toolkit: Recovery Plan Template" "Toolkit: RFP for IT Disaster Recovery and Work Area Recovery Services, 2010" "A New Approach: Obtain Business Ownership and Investment Commitment for Business Continuity and Resilience Management Through Key Performance and Risk Indicator Mapping" "ITScore for Business Continuity Management, 2012" "ITScore for Business Continuity Management: Results Through January 2012 Show Midlevel BCM Program Maturity" "Toolkit: Assessing the Effectiveness of Recovery Plans Following a Disaster" "Activity Cycle Overview: Business Continuity Manager Role, 2010 to 2011" "Business Continuity Management Governance Defined, 2010" 2 Gartner-Branded Research 2.1 Cool Vendors "Cool Vendors in Business Continuity Management and IT Disaster Recovery Management, 2012"2 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "Cool Vendors in Storage Technologies, 2012" "Cool Vendors in People-Centered Computing, 2011" "Cool Vendors in Storage Technologies, 2011" "Cool Vendors in Risk Management and Compliance, 2010" 2.2 Hype Cycles "Hype Cycle for Business Continuity Management and Disaster Recovery Management, 2012" "Hype Cycle for Storage Technologies, 2012" "Hype Cycle for Business Continuity Management and IT Disaster Recovery Management, 2011" "Hype Cycle for Real-Time Infrastructure, 2011" "Hype Cycle for Storage Technologies, 2011" "Hype Cycle for Business Continuity Management and IT Disaster Recovery Management, 2010" "Hype Cycle for Governance, Risk and Compliance Technologies, 2010" "Hype Cycle for Real-Time Infrastructure, 2010" "Hype Cycle for Regulations and Related Standards, 2010" "Hype Cycle for Networking and Communications, 2010" "Hype Cycle for Storage Technologies, 2010" "Hype Cycle for Virtualization, 2010" 2.3 Magic Quadrants/MarketScopes "Magic Quadrant for Enterprise Backup/Recovery Software" "Magic Quadrant for U.S. Emergency/Mass Notification Services" "Magic Quadrant for WAN Optimization Controllers" "Magic Quadrant for Enterprise Disk-Based Backup/Recovery" "MarketScope for Business Continuity Management Planning Software" 2.4 Predicts "Predicts 2012: Business Continuity Management Maturity Takes Two Steps Forward and One Step Back Due to Technology and Cultural Changes" "Predicts 2012: Supply Chain Predictions: Talent, Risk and Analytics Dominate" "Predicts 2011: Program Management Mistakes Will Sink Your BCM Boat" "Gartners Top Predictions for IT Organizations and Users, 2011 and Beyond: ITs Growing Transparency" "Predicts 2011: Cloud Computing Is Still at the Peak of Inflated Expectations" "Predicts 2011: Improved Recoverability May Be on the Horizon, but Significant Challenges Remain" "Predicts 2011: Storage, a Thicket of Digital Life in Evolving Internet and Entwining Storage Landscapes" "Predicts 2010: The Role of Business Continuity Management Continues to Expand and3 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... Extend" "Predicts 2010: New IT Disaster Recovery Technologies Are Emerging, but Most Are in the Early Stages" 2.5 Security and Risk Survey Reports "Survey Analysis: 2011 Data Center Conference, Backup Driven by Virtual Machine Recovery, Varying Deduplication Strategies and Shortened Retention Policies" "Survey Analysis: BCM Methodology Adoption and Organization Certification, 2012" "Survey Analysis: BCM Program Responsibility, 2012" "Survey Analysis: BCM Program Posture, 2012" "Survey Analysis: IT Disaster Recovery Management Spending and Testing Activities Expand in 2012" 2.5 SWOTS "SWOT: Hitachi Data Systems, Data Center Business, Worldwide" "SWOT: NetApp, Worldwide" 3 BCM BCM research is focused on the trends and best practices for maturing the overall program, including governance and program management, ensuring that the right components and processes are addressed in the program, plan development and management, leveraging software to assist in the maturing of the program, and so forth. 3.1 BCM Consultancies "Toolkit: RFP for Business Continuity Management and IT Disaster Recovery Management Consulting Services" "BCM Consultancy Survey, 2011" "Executive Summary: BCM Consultancy Survey, 2011" 3.2 BCM Governance "Business Continuity Management Governance Defined, 2010" "Toolkit: Business Continuity Management Charter Best Practices and Template" "Toolkit: Business Continuity Management Program Policy Template" "Toolkit: BCM Governance and Implementation Responsibility Decision Matrix, 2010" 3.3 BCM Program Certification "Case Study: ETS Shares Best Practices for BS 25999-2 Business Continuity Management Certification" 3.4 BCM Program Management "Agenda for Security and Risk Management, 2012" "New ISO BCM Standard Places Executive Governance Front and Center" "Applying Lessons Learned From Catastrophic Events in the Decade Since 9/11 to Improve Your BCM Program" "Key Issues for Security and Risk Management, 2011" "SAS 70 Is Not Proof of Security, Continuity or Privacy Compliance"4 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "Case Study: Euroclear Bank Applies Business Continuity Management Practices to Financial Crises" "Activity Cycle Overview: Business Continuity Manager Role, 2010 to 2011" "Q&A: How Much Does an Hour of Downtime Cost?" "2009 Data Center Conference Polling Results: BCM Organization Certification and Business Process Integration" "Key Issues for Risk and Security Roles, 2010" "Best Practices for Aligning Recovery and Business-as-Usual Access Requirements" "DRI and NFPA Announce New BCM Auditor Certifications" "Legal Issues in Business Continuity Management: Introductory Questions" "Legal Issues in Business Continuity Management: Advanced Questions" "Highlights From the Gartner Business Continuity Management Summit, 2009" "Top-Five Issues and Research Agenda, 2008: The Business Continuity Manager" "Findings: IT Disaster Recovery Can Upsell Business Continuity Management" "Gartner for IT Leaders Overview: The Business Continuity Manager" "Toolkit: Job Description for Business Continuity Manager" "Use Good Business Continuity Management to Prepare for a Disaster" "Client Issues for Business Continuity Management" "The Importance of Partnerships in Disaster Preparedness" "Making the Enterprise More Disaster-Proof" "Aftermath: Business Continuity Planning" "Year 2000 Aftermath: Too Much Contingency Planning?" "Business Continuity: Changing Market Dynamics" 3.5 BCM Program Maturity "ITScore for Business Continuity Management, 2012" "ITScore for Business Continuity Management: Results Through January 2012 Show Midlevel BCM Program Maturity" 3.6 Business Case of BCM "Improve Business Decision Making With Risk-Adjusted Value Management: Creating Risk-Adjusted Key Performance Indicators" "The Gartner Business Risk Model: A Framework for Integrating Risk and Performance" "A New Approach: Obtain Business Ownership and Investment Commitment for Business Continuity and Resilience Management Through Key Performance and Risk Indicator Mapping" "The CIO Challenge: Transforming Adversity Into Advantage" "Enlightening the CEO on Business Continuity Management" "Toolkit: How to Get Senior Management to Support Business Continuity" 3.7 Business Impact Analysis5 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "Building a Business Impact Analysis: The Keystone to Effective Business Continuity Planning" "Best Practices for Conducting a Business Impact Analysis" 3.8 Cost Optimization/Economic Crisis "How the Business Continuity Management Professional Can Survive the Worldwide Economic Crisis" "Cost-Cutting IT: Should You Cut Back Your Disaster Recovery Exercise Spending?" "Case Study: Cutting IT Costs Can Go Too Far" "Best Practices in Information Security Before, During and After Employee Downsizing" "U.S. Data Center Conference Focuses on How to Do More With Less" "Backup and Recovery Optimization and Cost Avoidance" "Cost Cutting Disaster Recovery in 2008" 3.9 Crisis/Incident Management "Crisis/Incident Management Defined, 2012" "Introduction to Virtual Data Rooms" "Sahana: Humanitarian Disaster Management and Collaboration System" "From Drill, Baby, Drill to Spill, Baby, Spill: Reinventing Risk and Passing the Billion- Dollar, Environmental Damage Threshold" "Shepherd Partners: The Keys to Crisis Management: Liquidity, Perception of the Enterprise in the Marketplace and Effective Leadership" "Toolkit: Requirements for Crisis Command and Emergency Operations Centers" 3.10 Emergency/Mass Notification "Best Practices: EMNS Implementation Advice" "Market Analysis in Depth: EMNS Magic Quadrant" "Magic Quadrant for U.S. Emergency/Mass Notification Services" "The Emergency or Mass Notification Service Market: Now and for the Next Five Years" "Toolkit: Emergency and Mass Notification RFP Template, 2011" "Spam Filters Could Cripple Your Emergency Notification System" "Choosing Trusted Portals for Secure External Collaboration" "Key Issues for Unified Communications, 2009" "New York Projects Show Critical Need for Unified Emergency Management" "Q&A: How Universities Can Notify Students of a Crisis" "Automated Emergency Notification Will Speed Disaster Recovery" 3.11 Plan Management and Exercising "Improve Your IT Disaster Recovery Plan, and Your Ability to Recover From Disaster" "Best Practices for Planning and Managing Disaster Recovery Testing" "Simulated Earthquakes Explore Arkansas IT Readiness"6 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "Toolkit: Recovery Plan Template" "Toolkit: BCMP RFP Template" "Ten Best Practices for Creating and Maintaining Effective Business Continuity Management Plans" "A Mid-Atlantic Health Plan Organization Creates and Maintains Viable BCM Plans Through Automation" "Q&A for Business Continuity Management: Best Practices for Plan Management" "How to Understand and Select Business Continuity Management Software" "Automate Recovery Planning With Business Continuity Planning Tools" "SunGards Strohl Acquisition May Benefit Competitors More" "Toolkit: Best Practices for a Successful Tabletop Recovery Test" 3.12 Risk Assessment "A Use-Case Approach to Developing an Information Security Risk Assessment Strategy" "Toolkit: Policy for IT Risk Management" "15 Common IT Risk Management Pitfalls" "Location Matters: A Model for Assessing Information Risk" "Assessing Risks Using Gartner Risk Assessment Methodology" 3.13 Social Media "The Dos and Donts of Using Social Media in Business Continuity Management" "Ignorance Is Not Bliss When It Comes to Social Media Monitoring" 3.14 Telework "Out of the Ashes: Business Continuity Management Lessons From Icelands Volcanic Eruption" "Make Telework a Feature in Your BCM Program" "Telework Failure Scenarios" "Keep Telework Off the Cost-Cutting Chopping Block" "User Survey Analysis: Remote Worker Communications Applications and Services, Worldwide, 2008" "User Survey Analysis: Remote Worker Investment Variations, Worldwide, 2008" "Gartners Telework Action Plan Is Key to Successful Implementations" "Findings: The U.S. GSA Is a Telework Success Story" "Telecommuting in Wartime: Draft a Remote-Access Program" "Rethink Work-at-Home Strategies for Pandemic Preparedness: Internet Bandwidth Supply Wont Meet Demand" "Critical Questions to Ask Network Service Providers About Rapid Remote-Access VPN Scalability" 3.15 Workforce Resilience "Toolkit: Update Your Human Resources Policies for BCM Considerations"7 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "Workforce Continuity: Best Practices for Workforce Management" "Workforce Continuity Defined" "Personal Preparedness Enhances Corporate Recovery" "London Bombings Confirm Need for People-Based Continuity Plans" "Safeguarding the Workforce in Uncertain Times" "Protecting People, Knowledge, Work: Are You Prepared?" 4 Event-Based Research Event-based research is focused on specific disaster events that occurred or on specific types of events, such as pandemics. 4.1 2011 Japan Earthquake/Tsunami 4.1.1 BCM/Supply Chain Management "Biogen Idecs Response to the 2011 Japan Disaster Results in Stronger Operational Resilience and Deeper Cultural Bonds" "Best Practices for IT Organizations in Response to the Rolling Blackouts Caused by the Japanese Earthquake and Tsunami" "Japan Disaster Shows the Importance of Open Crisis Management Tools" "Japan Earthquake and Tsunami Reaffirm the Need for Sensors" "Five Key Supply Chain Actions to Take When Disaster Strikes" "How Are Supply Chains Responding to the Ongoing Crisis in Japan?" "Best Practices for Recovering Critical Data From Damaged Hard Drives and Other Physical Media" "Management Update: Top 10 Business Trends Impacting the Utility Industry in 2011" "How to Manage the Sustainability Impact Triggered by the Japanese Energy Crisis" "Toolkit: Assessing the Effectiveness of Recovery Plans Following a Disaster" "Remote/Teleworking Practices Offer Opportunities to Help Japanese Businesses Recover From Disaster" "Best Practices for Making Insurance Claims Following the Japan Earthquake and Tsunami" 4.1.2 IT Market Impact "Disasters in Japan Raise Significant New Risks to Worldwide Enterprise IT Spending Growth Across the Global Goods Value Chain Through 2011" "The Gartner Scenario for ICT in Japan: Routes to the Market" "Market Trends: Semiconductor Inventory Aids Industry Recovery From Japans Disaster" "Impact of the March 2011 Disaster on Japans ICT Market" "The Impact of Japans Crisis on Enterprise PC and Notebook Hardware Acquisitions" "State of the Semiconductor Industry in the Aftermath of the Crisis in Japan" "Silicon Supply Concerns Following Japan Disasters Will Continue Into 2012" "Electronic Supply Chains Must Prepare for Possible Extended Shortage of BT Resin" "Market Insight: How Japans Earthquake May Influence the Telecom Industry Worldwide"8 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "Impact of Japan Earthquake on IT Services Market" "Japan Earthquake Will Cause Shortage of BT Resin in Electronics Supply Chain" "Japans Earthquake Creates Mixed Outlook for Memory Market" "Prepare for Printer Supply Shortages Following Japans Earthquake" "Japans Earthquake Creates Risks and Opportunities for Electronics and Semiconductor Companies" "Weekly Memory Pricing Index, 25 March 2011" "MCU Manufacturers Will Face Some Challenges After Crisis in Japan" "Disasters in Japan Make Semiconductor Industry Face Silicon Shortage" "Impact of the Disaster on the Japanese and Global Software Markets" "Forecast Analysis: Mobile Devices, Worldwide, 2008-2015, 1Q11 Update" "Disasters in Japan Lead to Continued Uncertainty in Lithium-ion Battery Supply for Notebooks and Consumer Devices" "Foundries Can Stem Semiconductor Production Losses by Japanese Vendors" "Forecast Alert: IT Spending, Worldwide, 1Q11 Update" "Forecast Analysis: Semiconductor Manufacturing Equipment, Worldwide, 2010-2015, 1Q11 Update" 4.1.3 Supply Chain Management "In Managing Recent Risk and Disruptions, Have Supply Chain Management Technologies Failed the Test?" 4.1.4 Industry Segments "The Japanese Crisis: Implications and Recommendations for Financial Services Firms" "How to Manage the Sustainability Impact Triggered by the Japanese Energy Crisis" 4.2 2009 Australias Black Saturday Bushfire "BCM and Crisis Response Lessons in Organization, Process, People and Technology From Australias Black Saturday Bushfire" 4.3 Hurricane Katrina "Buyer Contingency Planning Post-Katrina: Five Key Areas of Focus" "Katrinas Aftermath: Flexible Supply Chains Are Needed Now More Than Ever" "Findings From the Security and Privacy Research Meeting: Successful Business Continuity Approach in the Wake of Katrina" "Hurricane Katrina Highlights Need for Disaster Preparedness" "Tactical Disaster Recovery Advice: Prepare for 2005 Hurricane Season Using Lessons Learned in 2004" "Strategic Disaster Recovery Advice: Prepare for 2005 Hurricane Season Using Lessons Learned in 2004" 4.4 Pandemic Preparedness Planning "Rethink Work-at-Home Strategies for Pandemic Preparedness: Internet Bandwidth Supply Wont Meet Demand"9 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "IT Contingency Planning for H1N1 Pandemic" "A Perilous Practice: Not Planning for IT and Data Center Operations Support During a Pandemic" "Toolkit: Workforce Communications Templates for Influenza A(H1N1) Preparedness" "Will It Take More Deaths for Businesses to Prepare for a Pandemic?" "Swine Flu: Lessons in Pandemic Preparedness From the Financial Industry" "Swine Flu Means Test Transaction Document Recovery Plans Now" "The Swine Flu is a Reason to Plan, Not Panic" "Supplier Communications Critical During a Pandemic" "Findings: Include Web Conferencing in Your Enterprise Pandemic Planning" "Use ERP/Business Applications to Minimize Operational Discontinuity Created by Pandemics" "New U.S. Guidance on IT in Pandemics" "Business Applications Can Minimize Operation Discontinuity Created by Avian Flu" "Pandemic Investing" "Scenarios for Avian Influenza and How IT Can Mitigate Risk" "Prepare for Avian Influenza: Our Interview With Microsofts Jeff Jones" "Prepared for Avian Influenza: Our Interview With T. Rajah, CIO, CLSA" "Prepare for Avian Influenza: Our Interview With Andre Greyling, CIO, Hong Kong Hospital Authority" "Dell CEO Highlights Preparations Needed for Avian Influenza" "Prepare for Avian Influenza: Our Interview With the World Health Organizations Dr. David Nabarro" "More Key Steps to Prepare for a Possible Avian Influenza Pandemic" "Prepare Now for a Coming Avian Influenza Pandemic" "Key Steps to Prepare for a Possible Avian Influenza Pandemic" "SARS: The First Global Crisis of the 21st Century" 5 IT DRM IT DRM research is focused on trends and best practices in the recovery of the data center, IT infrastructure, applications, data and so forth. 5.1 Application Availability "The Case for Dependency Mapping for Ensuring Recovery Sustainability" "How to Deploy SSDs to Infrastructures Without Decreasing Availability" "Benchmarking Your IT Service Availability Levels" "Competitive Landscape: Clustering Software Market, Worldwide" "Enterprise Guide to Gartners High-Availability System Model for SAP" "Define, Develop and Verify Plans for Application Availability and Recoverability" "Latest RIM Outage Shows That Customers Need a Backup Plan"10 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "Outages Tarnish Reputation of GXSs Trading Grid" "For Many, BlackBerry Disruption Points to Need for Strategy" "Polling Results Show Increased Application Availability Focus and Achievement" "Gartner Data Center Survey Shows Application Availability Levels Rising" "CIO Update: Poll Shows Application Availability Levels Have Increased" "Poll Shows Application Availability Levels Have Increased" 5.2 Call Center Recovery "Protect Your Call Center With a Comprehensive Disaster Recovery Plan" 5.3 Cloud Computing "Best Practices for Limiting Data Protection Exposure in the Cloud" "The Realities of Cloud Services Downtime: What You Must Know and Do" "Black Swans Are Sure to Fly in the Public Cloud" "Cloud Security and Risk Standards" "Four Risky Issues When Contracting for Cloud Services" "How to Avoid the Pitfalls of Cloud Pricing Variations" "IT Procurement Best Practice: Six Ways to Avoid Escalating Costs During the Life of a Cloud Contract" "IT Procurement Best Practice: Nine Contractual Terms to Reduce Risk in Cloud Contracts" "IT Procurement Best Practice: Seven Ways to Reduce Hidden Upfront Costs of Cloud Contracts" "IT Operational Considerations for Cloud Computing" "Will Your Data Rain When the Cloud Bursts?" 5.4 Continuous Availability "How to Calculate the Cost of Continuously Available IT Services" "How to Design Software for Continuous Operations" "2008 Data Center Polling Shows Server Virtualization Spurs RTI" "Global eXchange Services Leaky Roof Exposes the Importance of High Availability" "UPS Designs Architecture for Continuous Availability" "Clinical Automation to Drive High-Availability Requirements" 5.5 Data Availability "Toolkit: Recovery-as-a-Service RFP Template" "Does Integrated Backup and Archiving Make Sense?" "Market Share Analysis: Enterprise Distributed System Backup/Recovery Market, Worldwide, 2011" "On Demand: From Capacity to Capability" "Recommendations for a Backup and Recovery Dashboard" "Tapes Role Is Changing From Data Protection to Active Archiving"11 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "Vendor Rating: NetApp" "The Future of Backup May Not Be Backup" "Market Trends: Midsize Businesses Are Embracing New Backup Techniques and Vendors" "Availability and Resiliency" "Market Trends: Cloud-Based Server Backup Services, North America, 2011" "Clients Must Prepare as Iron Mountain Looks to Exit Digital Business" "Cloud-Based Server Backup Services, 1Q11 Update" "Desktop/Laptop Backup Update: Endpoint Backup Gains in Importance" "Evolving Best Practices for Backup, Archiving and Tape: Strategies for Alignment" "Recommendations for a Backup and Recovery Dashboard" "Use of Disk for Backup Accelerates at the Expense of Tape" "Top Storage Trends and Concerns in 2011 and Beyond" "Survey Analysis: 2010 Data Center Conference, Storage Software Needs Driven by Virtual Machine Recovery, Deduplication and Backup/Archiving Retention Policies" "Best Practices for Addressing the Broken State of Backup" "Interest Declines for Use of the Distributed Virtual Tape Library Interface" "Disaster Recovery and High-Availability Software Licensing Fees and Policies" "Dataquest Insight: Cloud-Based Server Backup Services, 2Q09 Update" "Enterprise Managed PC Backup Services, 1Q09" "Cloud Storage: Benefits, Risks and Cost Considerations" "Backup and Recovery Optimization and Cost Avoidance" "Data Deduplication Is Poised to Transform Backup and Recovery" "Toolkit Decision Framework: Choosing a Data Replication Architecture for Disaster Recovery" 5.6 Data Center Management and Recovery "Lessons Learned From a Successful, Business-Focused Data Center Strategy" "Survival of the Fittest: Disaster Recovery Design for the Data Center" "Case Study: Disaster Recovery Testing Should Focus on Facilities Components" "Data Center Fire Suppression Options Are Cost, Toxicity, Green and Clean" "Data Center Availability" "Toolkit Sample Template: Checklist for Data Center BCM/DR Risk Assessment" "Formalizing Release Management" "Organizing and Measuring IT I&O: Trends and Best Practices, 2009" "Consider Key Trends When Planning Data Center Strategies and Architectures" "Top Challenges Facing IT I&O Executives" "Toolkit: Create a Strategy for IT Service Data Availability and Protection" "Data Backup and IT-DRM Modernization Generates Significant Savings for the Hay Group"12 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "How to Close a Data Center" "How to Manage Emerging Vendors: Implications for the I&O Leader" "When to Freeze IT Changes: Locking Down the Data Center" "The Current State of IT Infrastructure and Operations Maturity: Immature!" "U.S. Data Center Conference Focuses on How to Do More With Less" "Rabobank Group Benefits From Strategic Data Center Planning" "Preparing for the Impact of ITIL v.3 on GRC Strategies" "Toolkit Decision Framework: Best Data Center Locations for Disaster Recovery" "Toolkit Case Study: Banorte Project Shows the Benefits of Disaster Recovery Best Practices" "Server and Data Center Consolidation for Continuity" "Data Centers: Optimal Distances for Disaster Recovery" 5.7 Desktop Availability "Case Study on Minimizing Professional Productivity Loss Drives Desktop Availability Strategy at Stargate Digital" 5.8 Email Recovery "What You Need to Know About Exchange 2010 HA/DR and Storage" "Exchange Server 2007 HA/DR: Options, Benefits and Limitations" "Establishing E-Mail Service-Level Agreements" "Build Your Disaster Recovery E-Mail Architecture Before a Crisis Arises" 5.9 Information Security Integration "Sapphire Shows Increased Need for Business Continuity Planning" 5.10 IT Problem and Incident Management "Major Incidents Can Stifle the I&O: Preparation Is a Good Start" "Creating a Red Book Can Ensure Efficient and Effective Handling of Major Incidents and Outages" "Toolkit: Red Book Template for Improved Major IT Incident Handling" "How to Justify Your Investment in Problem Management" "Improving IT Service Support With Incident and Problem Management Integration" "How to Design an Emergency Change Model to Manage Risk" "Twelve Steps to Guide You Through a Major Incident to Mitigate Business Impact" "Use the Major Problem Management Process to Address Complex I&O Issues" "An Introduction to Major Incident Handling" "Begin Root Cause Analysis With the Five Whys Method" 5.11 IT DRM Program Management "Recent IT Outages Beg the Question: Whos Minding the Data?" "How Auditable Is Your Disaster Recovery Program?"13 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "Toolkit: Job Description for Lead IT Disaster Recovery Analyst" "Toolkit: Job Description for IT Disaster Recovery Analyst" "Toolkit: Job Description for Disaster Recovery Assurance Manager" "Toolkit: IT-DRM Self-Assessment" "Toolkit Best Practice: Making the Case for DRM Benchmarking" "Toolkit Best Practices: How to Benchmark Your Disaster Recovery Processes" "How to Organize for Disaster Recovery Management" "How to Conduct a Disaster Recovery Management Self-Assessment" "Introducing the Gartner IT Infrastructure and Operations Maturity Model" 5.12 IT DRM Considerations in Software Licensing "Understand and Manage IBM HA and DR Policies to Reduce Financial Risk" "Understanding High Availability and Disaster Recovery Failover Licensing for Oracle Software" "Licensing Microsoft Software for Disaster Recovery and High-Availability" "Disaster Recovery and High-Availability Software Licensing Fees and Policies" "How IBM, Microsoft and Oracle Address Disaster Recovery and High-Availability Server Software Licensing" 5.13 IT DRM Spending "Backup and Disaster Recovery Modernization Is No Longer a Luxury, but a Business Necessity" "IT-DRM Modernization Is Driving Increased Disaster Recovery Spending" "Disaster Recovery Spending Trends" "Cost Cutting Disaster Recovery in 2008" 5.14 IT DRM Strategy "Toolkit: Create a Strategy for IT Service Data Availability and Protection" "Modernizing IT-DRM Program Management" "The Key Technology, Operations and Business Drivers Behind Disaster Recovery Modernization, 2010" "Case Study: Constellation Energys Path to Business-IT Transformation and Value" "How to Assess Your IT Service Availability Levels" "Toolkit Best Practice: Disaster Recovery Service Levels: What Makes Them Different and Why They Are Important" "Six Myths About Business Continuity Management and Disaster Recovery" "Survey Confirms There Are Many Effective Disaster Recovery Strategies" 5.15 IT Service Dependency Mapping "The Case for Dependency Mapping for Ensuring Recovery Sustainability" "Q&A: No Silver Bullet Integrating Configuration Management Database With Data Recovery and Business Continuity Planning"14 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "IT Service Dependency Mapping Tools Provide Configuration View" 5.16 Network Recovery "Use WAN Capacity Planning to Improve Disaster Recovery" "Midsize Enterprise Questions About Networking" 5.17 Real-Time Infrastructure "Clearing the Confusion About Fabric-Based Infrastructure: A Taxonomy" "Survey Shows High Interest in RTI, Private Cloud" "Building Private Clouds With Real-Time Infrastructure Architectures" "RTI Forms the Foundation of Business Process Fusion" "Architecting the Real-Time Infrastructure" "Real-Time Enterprise: Business Continuity and Availability" "Survey Shows the RTI Journey Continues" 5.18 Remote Access "Ten Remote-Access Failures Your Company Could Avoid in an Emergency" "Critical Questions to Ask Your VPN Provider About Rapid License Capability" "Make Remote Access Inventory Part of Disaster Planning" 5.19 Recovery Sourcing "Adopt Best Practices to Procure Disaster Recovery Subscription Services" "New Evaluation Criteria and Provider Capabilities Are Changing Disaster Recovery Sourcing" "Disaster Recovery Sourcing: The Time to Make More-Informed Decisions Has Come" "Toolkit: RFP for IT Disaster Recovery and Work Area Recovery Services, 2010" "Data Center Sourcing: Cloud, Host, Co-Lo, or Do It Yourself" "Data Center System Continuous Availability" "Data Center System Data Recoverability" "Data Center System High Availability" "Data Center System No-Recoverability" "Data Center System Standby Server" "Hot Site" "Mirrored Site" "Warm Site" "Disaster Recovery Service-Level Management: Implementation Guidelines" "How to Ensure Security and Business Continuity in Offshore Infrastructure Outsourcing" "IT Disaster Recovery Sourcing Considerations" "Too Many Data Center Conference Attendees Are Not Considering Availability and Location Risks in Data Center Siting and Sourcing Decisions" "Critical Recovery Questions to Ask SaaS Providers"15 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "IT Operational Considerations for Cloud Computing" "Toolkit: Disaster Recovery Contract Negotiating Points" "Q&A: Benefits and Success of Insourced vs. Outsourced Disaster Recovery" "Take Immediate Steps to Build Colocation Into Your Disaster Recovery/Business Continuity Plans" "Beware of Unplanned Downtime When Using Software-as-a-Service Providers" "Seek Evidence to Support Service Providers Business Continuity Claims" "SunGard Should Use Spin-Off to Improve Customer Relations" "Comdisco and SunGard Merge: Advice for Their Clients" "Negotiating a Sound Business Continuity Contract" "HP Business Recovery Services: A Viable Option?" 5.20 Telecommunications "Cable Outage Shows Need for Redundancy, Resumption Plans" 5.21 Virtualization "Data Center Conference Attendees Are Bullish on Virtualization and Cloud Computing for Improving Application Services Recovery and Availability" "Polling at 2009 Data Center Conference Shows Broad Use of Virtualization for Disaster Recovery" 6 National Protection National protection research is focused on the recovery efforts for events such as terrorist attacks, national protection challenges and other politically associated events. "September 11: Business Continuity Lessons" "Executive Lessons Post September 11" "Business Continuity Lessons Not Learned From Sept. 11" 7 Supply Chain Availability Supply chain availability research is focused on trends and best practices for ensuring that partners, suppliers, vendors and so forth are managing their own internal recovery efforts such that they meet the needs of their customers. "Water: Supply Chain Risks and Opportunities for Brands and Businesses" "Case Study: Dow Chemical Uses Supply Chain Modeling to Manage Risk and Achieve Balanced Resilience" "Where Does Your Company Rank on the Supply Chain Risk Maturity Curve?" "In Managing Recent Risk and Disruptions, Have Supply Chain Management Technologies Failed the Test?" "Multitier Supply Chain Visibility Improves Supply Chain Relationships and Reduces Risk" "Improved Economy, Nearshoring or Better Risk Mitigation Strategies: Whats Behind the Decline in Supply Chain Risks?" "Managing the Biggest Supply Chain Risk of All: Constant Change" "Managing Retail Supply Chain Risk: Now Is Not the Time To Retreat"16 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "The Supply Chain Councils Supply Chain World Tackles Post-SCOR Needs" "Your Semiconductor Supply Chain Is Less Resilient Than You Think" "ESCL Analyst Insight: Supplier Collaboration in a VUCA World (Sep-11 Forum EMEA)" "Supply Chain Excellence: Leverage Supplier Segmentation to Create Differentiated Value in the Supply Network" "2011 Global Crisis Highlights the Need for Logistics-Focused Supply Chain Risk Management" "Two Major Supply Chain Failures Highlight the Need for Three Risk Management Best Practices" "North Star Alliance: Assuring a Healthy Supply Chain" "Case Study: Cisco Addresses Supply Chain Risk Management" "Is Your Company Air Cargo Dependent? Prepare Now to Ease Supply Chain Delays in August 2010" "Fighting Global Supply Risk: Pitney Bowes Maps a Plan" "How Financially Viable Are Your Suppliers?" "Toolkit: Create and Implement a Supply Chain Risk Management Framework" "Where Does Your Company Rank on the Supply Chain Risk Maturity Curve?" "Top Strategies and Technologies for Mitigating Supplier Risk" "Supply Chain Peer Forum Teleconference: Risk Management" "Supply Chain Risk Management Must Be a Key Requirement for S&OP in Turbulent Times" "Supply Chain Lessons From the BP Deepwater Horizon Incident" "Aidmatrix: Supply Chain Management to the Rescue" 8 Vertical Industries and SMBs Vertical industry research is focused on BCM and IT DR trends, and best practices that are specific to an industry or industry segment, such as financial services, government, healthcare, manufacturing and SMBs. 8.1 Financial Services "Data Center Trends and Recommendations in Financial Services, North America" "Banks Worldwide Must Prepare for Civic Bankruptcies" "Managing Scarcity-Driven Business Disruptions" "Times of Transition Demand Immediate Action" "Catastrophic Events Will Continue to Test Insurers Through 2012" "Findings: Catastrophic Risks Are Real for Health Insurers" "Banking and Investment Services BCM/DR, 2006" 8.2 Government "Case Study: City of Chicago and ChicagoFIRST Public-Private Partnership" "FEMA Announces Guidelines for the Credentialing of State and Local First Responders" "Cost-Cutting IT: Should You Cut Back Your Disaster Recovery Exercise Spending?"17 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... "The U.S. Federal Government Offers Satellite Communications to First Responders" "Emergency Notification Planning" "Governments Are Using IT to Better Secure the Homeland" "How to Quickly Spread the Word Locally: Basic and Advanced Editions" "Miami-Dade Launches Multijurisdictional Government Contact Center" "The Emergency Services Sector of the National Infrastructure Protection Plan" "Michigans Successful Experience With Centralizing Government IT" "Governments Working Together Bridge Emergency Response Gaps" "Emergency Communications Managers Should Plan at the National Level Because of the Nature of Voice Over IP Services and Regulations" "Management System Unites U.S. Emergency Response Groups" 8.3 Healthcare "Disaster Recovery at Hartford Hospital" 8.4 Manufacturing "Use IT to Reduce Risks From Business Interruptions" 8.5 SMBs "Market Insight: Opportunities to Sell Disaster Recovery Solutions in the Midmarket" "Midsize Enterprise Summit Business Continuity Questions" "SMBs Must Raise Awareness of Importance of Business Continuity/Disaster Recovery Plans" "Business Continuity Questions From European Midsize Businesses" "Preparing for a Disaster: Affordable SMB Actions" Recommended Reading Some documents may not be available as part of your current Gartner subscription. "Research Roundup: Business Continuity Management and IT Disaster Recovery Management, 4Q11" "Research Roundup: Business Continuity Management and IT Disaster Recovery Management, 2Q11" "Research Roundup: Business Continuity Management and IT Disaster Recovery Management, 2Q10" "Research Roundup: Business Continuity Management and IT Disaster Recovery Management, 3Q09" Note 1 Core Findings for a BCM Program The main drivers for BCM program growth and maturity — 24/7 service delivery, globalization and increasing operational risk — are expanding the scope of BCM beyond its roots in the IT department. The relationships among these three drivers are18 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... expanding the types of scenarios (IT, non-IT, local and regional) and the average outage duration being planned for, as well as public/private sector coordination in recovery planning efforts, and are increasing the focus on satisfying government and industry regulations. BCM program components must apply globally across all locations, lines of business (LOBs) and workforces, with accommodations for local or functional issues, such as staff size at an operating location, locale-specific disaster scenarios and data center versus sales office. Enterprises with mature BCM programs tend to be in high-risk, high-impact and often highly regulated vertical industries. Organizations that do not have external requirements for establishing a BCM program are at risk of not recovering from a large-scale event or one that lasts more than seven days. Resiliency is a level of business operations maturity that few, other than the largest critical-infrastructure-related organizations, will attain during the next 10 years. Note 2 Core Recommendations for Every BCM Program Make the business case for BCM by speaking the language of the business — on-time delivery, sustainability, good governance, supplier performance, agreement fulfillment and so forth. Start a vendor availability risk management program to ensure that your supply chain meets your organizations recovery and resiliency needs. Put in place a governance structure and executive steering committee to oversee the enterprisewide BCM program. Assign BCM responsibility to senior management in the organization and in each LOB. Establish an integrated operational risk management practice to leverage the risk identification and impact analyses across multiple risk venues. Identify the impact of a business disruption on the organization, and the value to the business of having a resiliency and recovery program in place. Communicate those results and value to senior management. To move toward a business operations management view of resiliency and recovery, integrate BCM into the enterprise culture to ensure that continuity of operations is a key planning component in all business operations activities. Align IT DRM with BCM for an integrated approach. Integrate BCM and IT DRM into the change management and project life cycle processes to ensure that recovery requirements — people, technology, facilities and business processes — are defined early in the project and, therefore, adequately funded. Cross-train personnel to remove single points of failure in business and IT processes. Conduct regularly scheduled exercises of all business and IT recovery plans. Ensure that adequate test time is scheduled with your third-party disaster recovery (DR) service providers. Review and update recovery plans against business needs, and market and industry best practices at least once a year. Assess your BCM program maturity by taking the online survey "ITScore for Business Continuity Management," and then apply the Gartner BCM Activity Cycle (see "Activity Cycle Overview: Business Continuity Manager Role, 2010 to 2011") to improve your programs maturity. Perform a gap analysis for component coverage using the Gartner BCM component definitions to uncover where your BCM program needs reinforcement.19 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24... © 2012 Gartner, Inc. and/or its Affiliates. All Rights Reserved. Reproduction and distribution of this publication in any form without prior written permission is forbidden. The information contained herein has been obtained from sources believed to be reliable. Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartners research may discuss legal issues related to the information technology business, Gartner does not provide legal advice or services and its research should not be construed or used as such. Gartner shall have no liability for errors, omissions or inadequacies in the information contained herein or for interpretations thereof. The opinions expressed herein are subject to change without notice.20 of 21 9/23/12 4:11 PM
    • Print Document http://my.gartner.com/portal/server.pt/gateway/PTARGS_0_24...21 of 21 9/23/12 4:11 PM