Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Disaster Recovery NTC 2010


Published on

Session title: When Disaster Strikes, It's Too Late! Be Prepared with Business Continuity Plans In this interactive session, we will discuss what kinds of business interruptions to plan for, techniques for mitigation, elements of a proper business continuity plan, and how to begin the project. Attendees will leave with practical knowledge of how to protect their business operations from interruption, as well as concrete steps to begin developing a plan. Takeaways: 1. Knowledge of the specific elements of the infrastructure that need protection, and specific options to protect them 2. Information about ways to develop and test a business continuity plan, and how to get started on...

Published in: Technology, Business
  • Be the first to comment

  • Be the first to like this

Disaster Recovery NTC 2010

  1. 1. When Disaster Strikes, It's Too Late! Be Prepared with Business Continuity Plans Grant Howe VP of R&D for Sage Nonprofit Solutions
  2. 2. Learning Objectives <ul><li>After participating in this session, you will be able to: </li></ul><ul><ul><li>Understand the goals of Disaster Recovery Planning </li></ul></ul><ul><ul><li>Understand the components of a Disaster Recovery plan </li></ul></ul><ul><ul><li>Begin your Disaster Recovery Planning project </li></ul></ul>
  3. 3. What is a Disaster Recovery Plan? <ul><li>Disaster recovery planning is a subset of a larger process known as business continuity planning and should include planning for resumption of applications, data, hardware, communications (such as networking) and other IT infrastructure. A business continuity plan (BCP) includes planning for non-IT related aspects such as key personnel, facilities, crisis communication and reputation protection, and should refer to the disaster recovery plan (DRP) for IT related infrastructure recovery / continuity </li></ul><ul><li>Source: </li></ul>
  4. 4. Dilbert on Disaster Recovery <ul><li>Is this your current plan? </li></ul>
  6. 6. Deciding goals for operational continuity? <ul><li>What are your organizations key business processes? </li></ul><ul><li>How long can your org survive without these operations business process? </li></ul><ul><li>Do manual methods make time to restore less critical? </li></ul><ul><li>Do you have any processes with very little tolerance for downtime? </li></ul>
  7. 7. Sample Business Continuity Process Ranking Process Level Recovery Point Objective Donation Acceptance and Processing Critical 1 hour Elderly Meal Delivery Services Critical 4 hours ERP High 1 day CRM Medium 1 week
  9. 9. “ Follow the Money” planning methodology <ul><li>Trace how money flows through your organization </li></ul><ul><li>Start with income (donations, grants, revenue, etc) </li></ul><ul><li>Map where that money goes as expenditures </li></ul><ul><li>Document the process flow and include all of the systems used to process the transactions </li></ul>
  10. 10. “ Committed Service” planning methodology <ul><li>Identify services your organization provides (meals, counseling, etc.) </li></ul><ul><li>Map how raw materials used in that service become usable and delivered (groceries, people, transportation) </li></ul><ul><li>Document the process flow and include all of the systems used to process the transactions </li></ul>
  12. 12. Decide Criteria for invoking the plan <ul><li>What is the maximum amount of time a process can be unavailable before action must be taken? </li></ul><ul><li>At what point does the cost of executing the plan become secondary to the outage? </li></ul>
  13. 13. Critical Business Process Recovery Section <ul><li>Critical Business Process Workflow </li></ul><ul><li>Physical Plant Related Recovery Plans </li></ul><ul><li>IT Related Recovery Plans </li></ul><ul><li>People Related Recovery Plans </li></ul><ul><li>Assignments and Execution </li></ul><ul><li>Preconditions / Preventative Plans </li></ul>
  14. 14. Critical Business Process Workflows <ul><li>Use the process workflow that was developed through a “Discovery” methodology as outlined in the earlier sections </li></ul><ul><li>Make sure the workflow shows enough detail that someone who isn’t you can understand! </li></ul><ul><li>Be sure to identify critical systems and applications used in the transactions </li></ul>
  15. 15. Physical Plant Recovery Related Plans <ul><li>Office space? </li></ul><ul><li>Lights? </li></ul><ul><li>Heat / AC? </li></ul><ul><li>Power? </li></ul><ul><li>Water? </li></ul><ul><li>Delivery Transportation? </li></ul>
  16. 16. IT Related Recovery Plans <ul><li>Hardware? </li></ul><ul><li>Power? </li></ul><ul><li>Internet? </li></ul><ul><li>Email? </li></ul><ul><li>Phone Service? </li></ul><ul><li>Applications (got media and a license key?) </li></ul><ul><li>Data Recovery from Backup? (Do you have backups offsite?) </li></ul><ul><li>Tech support contact information? </li></ul>
  17. 17. Technology Time out: Consider Hosting, ASP or SaaS <ul><li>Consider preventing server disasters by owning and maintaining as few as possible </li></ul><ul><li>Consider a provider that will be contractually bound to 99%+ uptime for your critical services without your efforts </li></ul><ul><li>Ideas to look into: </li></ul><ul><ul><li>ASP or SaaS from your software vendor </li></ul></ul><ul><ul><li>Rackspace (Managed service provider) </li></ul></ul>
  18. 18. People Related Recovery Plans <ul><li>Who knows how to contact vendors? </li></ul><ul><li>Who knows how to cut payroll checks? </li></ul><ul><li>Who knows how to process credit card payments? </li></ul><ul><li>Is there more than one person who can perform each critical business transaction? </li></ul><ul><li>Do you have cell phone numbers to reach employees / volunteers / service providers? </li></ul>
  19. 19. Assignments and Execution <ul><li>What steps need to be taken to restore this process? </li></ul><ul><li>Who has the authority with vendors to do so? </li></ul><ul><li>Who has the required knowledge or training? </li></ul><ul><li>Is there a backup operator to execute this plan if the primary is unavailable or unreachable? </li></ul><ul><li>Who can make the decision to enact the plan? </li></ul><ul><li>Assign roles and communicate expectations to staff </li></ul>
  20. 20. Required Preconditions / Preventative Plans <ul><li>What needs to be part of your regular operating plan to enable your disaster recovery plans? </li></ul><ul><li>Set these actions in motion as part of your finished recovery plan </li></ul><ul><li>Example: </li></ul><ul><li>Its really hard to restore from backup if you don’t have any or they were in the office when it burned down! </li></ul>
  21. 21. Technology Time out: Cloud Backup Solutions <ul><li>Example of cost : </li></ul><ul><ul><ul><li>Amazon S3 $0.15 / GB / month </li></ul></ul></ul><ul><li>Don’t want to “Roll your own” try one of these: </li></ul><ul><ul><ul><li> </li></ul></ul></ul><ul><ul><ul><li> </li></ul></ul></ul><ul><ul><ul><li> </li></ul></ul></ul><ul><ul><ul><li>TechSoup Stock: Backup Software </li></ul></ul></ul>
  22. 22. Testing The Plan <ul><li>Test each business process in your section when finished and at least annually after that! </li></ul><ul><li>Make sure that you r interactions with your vendors work as planned </li></ul><ul><li>Streamline your plan based on your test results </li></ul><ul><li>It is unlikely your plan will work exactly as you have planned it, do not be disappointed and focus on making corrections for the next test. </li></ul>
  23. 23. Plan Maintenance <ul><li>Review your business processes at least annually </li></ul><ul><li>Update the processes for changes in how things work </li></ul><ul><li>Examples: </li></ul><ul><li>Did you add new software applications? </li></ul><ul><li>Add new vendors you rely on? </li></ul><ul><li>Are there new processes or services to constituents you need to protect? </li></ul>
  24. 24. Technology Time out: Gosh, Where did I put that plan? <ul><li>Here in my desk (now melted and charred)? </li></ul><ul><li>On 3 duplicate and encrypted USB drives carried by 3 different key DR team members (updated monthly) </li></ul><ul><li>Available on encrypted secure storage on the internet to select DR team members (synced with a local folder) </li></ul><ul><ul><li> </li></ul></ul><ul><ul><li> </li></ul></ul><ul><ul><li> </li></ul></ul>
  25. 25. OMG! YOU SCARED ME! <ul><li>Practical short term risk reduction </li></ul>
  26. 26. Fix Your Backup Strategy <ul><li>Find out if you are doing backups at all </li></ul><ul><li>Make a list of additional data that needs backing up </li></ul><ul><li>Get a plan in place to backup everything on your list weekly </li></ul><ul><li>Store your backups offsite </li></ul><ul><li>Do it this week </li></ul>
  27. 27. Inventory your computing resources <ul><li>Make a list of all of the computers and storage devices (workstations & servers) </li></ul><ul><li>Annotate the functions and applications that are used on each </li></ul><ul><li>Rate each resource as critical or disposable </li></ul><ul><li>Critical resources are those that cannot be rebuilt quickly from new hardware and a backup (app servers, databases etc) </li></ul><ul><li>Disposable resources are those that can be recreated from backups and install disks easily </li></ul><ul><li>Focus your attention on plans to recover from failure of only the critical resources as your first step </li></ul><ul><li>Do it this month </li></ul>
  28. 28. Start talking about needs for a full plan <ul><li>Your ED and Board of Directors should easily realize the need </li></ul><ul><li>Pass around this presentation for education </li></ul><ul><li>Ask for assignment of a project manager / owner </li></ul><ul><li>Begin a project plan </li></ul><ul><li>Ask for budget </li></ul>
  30. 30. <ul><li> </li></ul><ul><li>Highlights – </li></ul><ul><ul><li>Techsoup Disaster Recovery Guide (PDF) </li></ul></ul><ul><ul><li>Disaster Planning: What Organizations Need to Know to Protect Their Tech (Webinar) </li></ul></ul><ul><ul><li>Disaster Planning: Backup, Backup, Backup! (Webinar) </li></ul></ul><ul><ul><li>TechSoup Stock: Backup Software </li></ul></ul>
  31. 31. Questions?
  32. 32. Sources / useful links <ul><li> </li></ul><ul><li> </li></ul><ul><li> </li></ul>
  33. 33. Evaluation Code: 174 How Was this Session? Call In Text Online Call 404.939.4909 Enter Code 174 Text 174 to 69866 Visit Enter Code 174 Session feedback powered by: Tell Us and You Could Win a Free 2011 NTC Registration!