Bring Your Own Disaster
•
1 like•570 views
Digitale data zijn cruciaal voor de werking en het voorbestaan van uw organisatie. En meer van deze data, toepassingen en infrastructuur verhuizen naar de cloud. Ul eert hoe u anno 2015 de uptime van uw IT (en dus ook van uw bedrijf) kan optimaliseren. Uiteraard speelt de cloud hier een belangrijke rol. We laten u zien hoe cloud diensten in relatie kunnen staan tot de continuïteit van uw bedrijfsvoering en welke waarborgen zij eventueel kunnen garanderen.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (18)
Similar to Bring Your Own Disaster
Similar to Bring Your Own Disaster (20)
Recently uploaded
Recently uploaded (20)
Bring Your Own Disaster
- 2. Page: 2Belgium Cloud ©
- 3. Page: 3Belgium Cloud © Business Continuity & Cloud Business Continuity – Fact & figures Questions you should ask to your Cloud Service Provider. Agenda
- 4. Page: 4Belgium Cloud © Business & Cloud
- 5. Page: 5Belgium Cloud ©
- 6. Page: 6Belgium Cloud © Business & Cloud
- 7. Page: 7Belgium Cloud ©
- 8. Page: 8Belgium Cloud © Business Continuity & Cloud Business & Cloud Questions you should ask to your Cloud Service Provider. Agenda
- 10. Page: 10Belgium Cloud © Why Disaster Recovery-as-a-Service is Growing Reason 1: Every Company Needs Disaster Recovery Reason 2: Confidence in the Cloud is Growing Reason 3: Cloud Brings Simplicity to Disaster Recovery Reason 4: Overwhelming Cost Benefits According to a 2015 IDG White paper, “Cloud-Based Disaster Recovery Emerging as Top Priority”
- 11. Page: 11Belgium Cloud © We have entered the era of the Always-On Business, driven by factors including: For instance, emerging markets are predicted to generate 40 percent of global growth within the next 15 years1 – reaching these markets will require working across borders and time zones. The Always-On Business is a reality 1 – Dewhurst, Harris and Heywood. “The global company’s challenge”. McKinsey Quarterly, June 2014 – http://www.mckinsey.com/insights/organization/the_global_companys_challenge 0% 10% 20% 30% 40% 50% 60% 70% Morefrequent,real-timeinteractions… Accessingapplicationsacrossmultipletime… Increasedadoptionofmobiledevices Employeesworkingoutsideregularhours Increasedautomationfordecisionmaking…
- 12. Page: 12Belgium Cloud © To meet these requirements, businesses are building Modern Data Centers, investing in technologies such as virtualization, modern storage and cloud. 81 percent of organizations are either modernizing or have already modernized their data centers, with an additional 16 percent planning to do so within the next 2 years. Datacenters are a reaction to Always-On needs 0% 20% 40% 60% 80% 100% Data center is already modernized Modernizing the data center now Planning to modernize within 2 years
- 13. Page: 13Belgium Cloud © 70% of CIOs will embrace a “cloud first" strategy in 2016 -IDC 45% of total IT services will be spent on cloud services by 2020 -Forrester 71% of companies see rising demand for IT projects in 2015 -InformationWeek Sources: “Outlook 2015,” InformationWeek Report, 12/06/2015; “Worldwide CIO Agenda 2015 Top 10 Predictions,” IDC, doc #238464, September 2015; “Prepare For 2020: Transform Your IT Infrastructure And Operations Practice,” Forrester Research, Inc., October 24, 2015; Datacenters are being transformed
- 14. Page: 14Belgium Cloud © Unplanned downtime hits enterprises 13 times a year. This lasts over 17 hours . This downtime alone costs $1.4 million to $2.3 million a year – in lost revenue, decreased productivity and missed opportunities. Unplanned downtime is driving increased costs $- $1,000,000$2,000,000$3,000,000 Non-mission-… Mission-critical… Cost per incident of downtime Total annual cost 0 5 10 15 20
- 15. Page: 15Belgium Cloud © 70% About 70% of business people have experienced data lost due to accidental deletion of small to medium businesses will suffer a major disaster causing loss of critical data every 5 years. (Source: Richmond House Group) 20% of companies that lost their data for 10 days or more filed for bankruptcy within one year. (Source: National Archives & Records Administration in Washington.) 93% Tape drives fail on average 100%; that means ALL tape drives fail at some point and do NOT offer complete protection for your data. 100% Backup Facts
- 16. Page: 16Belgium Cloud © 1 in 6 recoveries FAIL, meaning data will be lost permanently at least twice a year. This guaranteed data loss costs at least $682,000 each year. Together with the minimum average cost of downtime, application failure will cost enterprises over $2 million a year. Recovery failure is guaranteed
- 17. Page: 17Belgium Cloud © Always-on means a Recovery Time Objective and Recovery Point Objective of 15 minutes or less for ALL applications and data, not only the most critical. Recovery times are 2.5 hours away from always-on standards Backup frequency is 4.5 hours away from always-on standards IT is missing Always-On targets 0 1 2 3 Always-on target Current performance 0 1 2 3 4 5 Always-on target Current performance
- 18. Page: 18Belgium Cloud © Datacenter investment priorities Technologies organizations are investing or planning to invest in (%)
- 19. Guess what? Here’s an image of the NSA’s Fort Meade Data Centre
- 20. Page: 20Belgium Cloud © Number of incidents or unplanned application downtime per year
- 21. Page: 21Belgium Cloud © Length of planned & unplanned application downtime (hours)
- 22. Page: 22Belgium Cloud © Cost of data loss per hour (US$)
- 23. Page: 23Belgium Cloud © 80 % of recoveries are transactional 80% 20% Data Recovery challenges… 20% are full recoveries
- 24. Page: 24Belgium Cloud © 94% 94% of backups are NOT tested for recoverability 16% of recovery attempts fail 16% Data Recovery challenges…
- 25. Page: 25Belgium Cloud © Datacenter Virtualization Storage Cloud 24/7 operations No patience for downtime and data loss Growing amount of data Always-On Business needs Data Protection
- 26. Page: 26Belgium Cloud © Business Continuity & Cloud Business & Cloud Business Continuity – Fact & figures Agenda
- 27. Page: 27Belgium Cloud © Business Continuity & Cloud
- 28. Page: 28Belgium Cloud © Cloud Computing as defined by the NIST National Institute of Standards and Technology
- 29. Page: 29Belgium Cloud © Cloud Computing as defined by the NIST
- 30. Page: 30Belgium Cloud © Is self-provisioning possible? On-demand Self-service
- 31. Page: 31Belgium Cloud © Cloud Computing as defined by the NIST
- 32. Page: 32Belgium Cloud © Does the CSP* offer redundant network connectivity? Broad Network Access * Cloud Service Provider
- 33. Page: 33Belgium Cloud © What is the minimum guaranteed bandwidth? Broad Network Access
- 34. Page: 34Belgium Cloud © Cloud Computing as defined by the NIST
- 35. Page: 35Belgium Cloud © What are the redundancies offered on the level of the CSP* infrastructure? Resource Pooling * Cloud Service Provider N + 1
- 36. Page: 36Belgium Cloud © With what type of customers will the customer have to share resources? What is the projected impact? Is additional isolation possible if needed ? Resource Pooling
- 37. Page: 37Belgium Cloud © Backups and “no data loss” guarantee included (RPO & RTO)? Resource Pooling
- 38. Page: 38Belgium Cloud © Is the customer allowed to define the backup/restore policies applicable to his environment? Resource Pooling
- 39. Page: 39Belgium Cloud © How many datacenters and where are the datacenters located? Resource Pooling
- 40. Page: 40Belgium Cloud © Are the required certificates available? Are customers/third parties allowed to audit the CSP* ? Resource Pooling * Cloud Service Provider
- 41. Page: 41Belgium Cloud © How do customers communicate with the CSP* service organization? Resource Pooling * Cloud Service Provider
- 42. Page: 42Belgium Cloud © Cloud Computing as defined by the NIST
- 43. Page: 43Belgium Cloud © Is automatic scaling of resources available? Rapid Elasticity
- 44. Page: 44Belgium Cloud © Are there resource reconfigurations that necessitate a server reboot? Rapid Elasticity
- 45. Page: 45Belgium Cloud © Cloud Computing as defined by the NIST
- 46. Page: 46Belgium Cloud © How is SLA compliance measured? Measured Service
- 47. Page: 47Belgium Cloud © Some Additional Questions Does the CSP* meet required compliance and security standards? * Cloud Service Provider
- 48. Zorg altijd voor een plan B
- 49. Page: 49Belgium Cloud ©
Editor's Notes
- Cloud Computing kan heel technisch benaderd worden, maar voor u als ondernemer is het belangrijkst dat u begrijpt wat Cloud Computing betekent en wat het voor u kan betekenen. We bespreken hierna dan ook kort de belangrijkste kenmerken van Cloud Computing, de voor- en de nadelen ervan en hoe u een geschikte partner kiest die u hierbij kan helpen. Daarna zullen we Cloud Computing wat nader toelichten aan de hand van een praktijkvoorbeeld.
- Cloud volgens het bedrijfsleven – Hoe kijkt de ondernmer naar de Cloud?
- Top 3 Drijfveren voor over te schakeln naar de Cloud
- Cloud volgens het bedrijfsleven – Hoe kijkt de ondernemer naar de Cloud?
- Top drie van bezwaren tegen Cloud computing.
- Afhankelijkheid van netwerk Het duidelijkste nadeel van cloud computing is dat je afhankelijk bent van je netwerkverbinding : Je bent namelijk verplicht ‘online’ zijn om te kunnen werken Stabiliteit en snelheid van je internetverbinding bepaalt gebruikerservaring Afhankelijkheid van Cloud Provider Naast de afhankelijkheid van de verbinding naar de cloud is er natuurlijk nog de overlevering aan de aanbieder daarvan. Welke cloud-partij vertrouw je met je kostbare applicaties, je kostbare data? Denk daarbij aan betrouwbaarheid van de aanbieder, bedrijfscontinuïteit van die leverancier, technische betrouwbaarheid van de cloud-dienst, maar ook aan de verschillen in wetgeving omtrent data tussen Europa en de Verenigde Staten. Niet alles is ‘Cloud-ready’ De meeste standaard-toepassingen zijn wel beschikbaar via een Cloud-model, maar sommige programma’s (zoals bvb boekhoudsoftware, software die technische aparatuur aanstuurt, eigen ontwikkelde software ...) kun je gewoon moeilijk migreren naar de Cloud. Er bestaan Cloud providers die u toelaten uw eigen software in de Cloud te draaien, maar het prijskaartje hiervan ligt uiteraard een stuk hoger dan hetgeen standaard wordt aangeboden. Groeipijnen Vraagt een andere manier van denken en dus ook van werken. SLA Het lijkt misschien vreemd dat dit zowel bij de voordelen als nadelen vermeld wordt, maar de verklaring hiervoor is eenvoudig : Er is wel wat ruimte om applicaties en diensten aan te passen aan de wensen van individuele klanten, maar de mogelijkheden om service-level requirements aan te passen op maat van een welbepaalde klant lijkt minder vanzelfsprekend bij een Cloud Provider, dan wanneer deze door de eigen IT afdeling volledig in het teken van de bedrijfsdoelstellingen worden ingericht.
- Demands of the Always-On Business are increasing due to: - More frequent, real-time interactions between customers, partners, suppliers and employees (65 percent) - The need to access applications across time zones (56 percent) - Increased adoption of mobile devices (56 percent) - Employees working outside regular hours (54 percent) - Increasing levels of automation for decision making and transactions (53 percent)
- 82 percent of CIOs are facing an “Availability Gap” between the level of data protection they can provide, and what their increasingly always-on businesses demand Even in the best possible case, enterprises will lose over $2.11 million from lost productivity, opportunity and unavoidable data loss every year 93 percent of enterprises are increasing their requirements for minimizing downtime – i.e. recovering data faster 92 percent are increasing their requirements for guaranteeing access to data – i.e. backing up data more often
- On average, enterprises encounter unplanned downtime 13 times a year, or more than once a month This downtime lasts an average of 1 hour 20 minutes for mission-critical applications, meaning enterprises can suffer over 17 hours of downtime per year The longest scheduled commercial flight in the world, from Dallas Fort Worth to Sydney, lasts 16 hours 55 minutes A single hour of downtime costs $82,864 for mission-critical applications and $43,886 for non-mission-critical applications, in lost revenue, decreased productivity and missed opportunities This means that over a year, downtime alone will cost enterprises between $1,432,717 and $2,264,951
- 1 in 6 recoveries of backups fails. With 13 downtime incidents a year, this means two of these will be unrecoverable In these cases, organisations will suffer the maximum possible data loss at a bare minimum, as they’ll need to roll-back to the last healthy backup This translates to a guaranteed data loss of $682,182 a year regardless of when failures happen in the backup cycle Over a year, downtime alone will cost enterprises at least $1,432,717 – added to the guaranteed data loss, enterprises will lose over $2.11 million from lost productivity, opportunity and unavoidable data loss every year
- For a business to be always-on, its RTO should be 15 minutes or less. To reach this, businesses would need to recover data 2 hours and 37 minutes faster Similarly, to avoid the risks of data loss, RPO should be 15 minutes or less. To reach this, businesses would need to reduce their time between backups by 4 hours and 34 Minutes
- Data center modernization is a popular trend in organizations globally. But what exactly does this mean to organizations and exactly how are they investing their IT budgets? The graphic here shows what modern technologies that companies consider to be a top investment priority for their data center. Virtualization A quick glance at the survey results shows us that virtualization is the biggest area of investment, with some 97% of companies increasing or planning to increase their spending on it. Virtualization provides the foundation for infrastructure consolidation, rapid provisioning, and mobile working – three major capabilities that enable always-on business operations. Operational system and storage upgrades It’s also unsurprising to see heavy investment in storage upgrades. With data volumes growing every day, and more and more businesses unlocking the power of analytics, one of the biggest challenges IT teams are facing is efficiently storing and enabling fast access to huge quantities of data. Data protection and disaster recovery With greater volumes of data, comes a greater risk of downtime and data loss – the costs of which can be extremely high. Stronger data protection and disaster recovery capabilities are needed not just to comply with regulations and avoid the costs of data loss and downtime, but also to ensure companies can meet tough Recovery Time and Recovery Point Objectives. Cloud computing The cloud is gaining popularity as an IT platform – granting better business agility, the simple extension of services to remote devices, and helping cut costs with subscription-based software pricing modules. For modern businesses, it provides an easy way to get the tools and IT services they need for less, while cutting CAPEX costs.
- NSA is in the House
- The Veeam Availability Suite answers the 5 key best practices Questions that face customers of the always on business: How quickly can you recover what you need and in the form that you need it, file, email, VM and applications: What are you currently doing to eliminate or minimize the risk of data loss? How do you verify data recoverability? How do you mitigate risks? What are you doing to ensure that your critical files, applications and virtual servers are recoverable in the event your production copies become corrupt? What are you doing to detect potential problems in your IT environment and data protection infrastructure before they have negative impact? How do you gain better visibility? So when I speak to customers’ often people say hey we are different, and I understand and recognize that everyone is a little bit different, but let me give you a sense of how we’ve seen this scenario play out at similar companies from your industry. (Please select here the 1-2 customer case studies from the next 9 that support this customer presentation)
- A: Depending on your company’s knowledge and experience, you might want to provision resources yourself using interactive tools instead of having to call the CSP whenever you want to change your cloud-computing environment. Try to get a detailed description of the configuration tools available and verify the availability of management APIs allowing you to integrate cloud management in your existing IT management framework.
- A: If you are moving business critical applications to the cloud the availability of these applications is of extreme importance. As such all cloud computing components necessary to support these applications should support at least N+1 redundancy including the network connectivity components. Of course, CSP network redundancy will not help if your site loses its non-redundant network connectivity!
- A: Sad but true: bandwidth overbooking happens a lot based on the idea not all customers will be using the maximum available bandwidth simultaneously. Ask your CSP what the minimum guaranteed bandwidth is under full load conditions. Remember you need to be able to send and receive network traffic so make sure to get the minimum guaranteed bandwidth for both incoming and outgoing traffic.
- A: Resource pooling refers to the grouping together of resources (assets, equipment, personnel, effort, etc.) for the purposes of maximizing advantage and/or minimizing risk to the users. By pooling resources, which involves virtualization of typical IT stacks server, storage and networking (but also on the level of datacenter power and cooling), users benefit from lower individual investments since resources are shared. Although shared infrastructures have huge benefits potential issues on the shared components will impact all users of the shared environment. A thorough analysis of the infrastructure is recommended to identify potential single points of failure. One may opt for 'private' instances (private clouds) for specific needs or for specific reasons. On the level of resource pooling bigger suppliers tend to have the benefit of being able to provide shared support services with round the clock service. What do you prefer: round-the-clock access to a support service with potential less expertise or having to rely on a single support engineer who is on duty during off peak hours?
- A: Remember cloud computing is about sharing resources with a number of, in general, unknown outside parties. A thorough risk assessment is needed and you should be informed about the measures and techniques used by the CSP to guarantee logical separation of data between the different tenants sharing the cloud-computing resources. This risk assessment should of course also take into account the nature of the data you intend to move into the cloud. For sensitive data you might want the CSP to provide a configuration that minimizes the sharing of sensitive resources such as the disks containing your organisation’s sensitive data.
- A: Quite often backups are a billable option but some CSPs offer a “no data loss” guarantee as a basic service. A “no data loss” guarantee is usually implemented using data replication between multiple datacentres and is to be considered as essential. Some CSPs offer “no data loss” guarantees without stating a specific Recovery Time Objective (RTO) and/or Recovery Point Objective (RPO). Make sure you fully understand the possible consequences of this sort of guarantee.
- A: How much control do you have for implementing a backup/restore policy adapted to your business needs? Make sure you have detailed information available about the backup and restore policies and procedures. Find out what possibilities you have concerning the testing of your backup and restore policies.
- A: For continuity and availability reasons a CSP should operate at least two datacentres. It is also important to know where these datacentres are located to assess their chances of surviving a catastrophe and to check compliance with data storage legislation relevant to your business.
- A: You will want to do business with a CSP you can trust. Certification and auditing provides the foundation for trust. CSPs need to be able to show that they can live up to the promises they are making. Certification and auditing can cover many control objectives: CSP organisation, planning, governance and risk management Documented policies and procedures Service change management Event management Logical security Change management Data integrity Physical and environmental security Service level agreements Client reporting, billing and satisfaction Financial health
- A: You may be interested in evaluating the way your CSP communicates with you. For critical events concerning your applications and data you will probably want to communicate with your CSP via telephone using the local language. For less urgent matters email communication should be sufficient.
- A: Is the scaling of resources automated or not? You should at least be able to set alerts on resource thresholds to allow you to monitor resource consumption and, if needed, to reconfigure the resources assigned to your services. Some systems will assign additional resources automatically when needed but you still need to be informed. Also, make sure the scaling mechanism covers both the addition and removal of resources.
- A: Most CSPs advertise scalability but often they forget to mention if a server reboot is necessary after reconfiguring the assigned resources. Depending on the server’s role, a reboot might be something you want to plan carefully if it is unavoidable.
- A: Most CSPs offer an SLA on the availability of the cloud service. Typically this availability would be between 99,95% and 99,99%. It is important to know how the effective availability of the cloud service is calculated. If calculated on a yearly basis, experiencing a 50 minutes downtime still meets the 99,99% availability SLA. If calculated on a monthly basis, a 5 minutes service interruption breaches that very same SLA. Make sure you understand the SLA details and the other general contract conditions. Negotiate if the standard SLAs do not fit your needs and make sure your contract clearly states the penalties (if any) for not meeting the SLA.
- A: Since your organisation remains accountable to regulators, business partners, customers and employees you should not consider using a particular CSP unless it meets the compliance and security standards applicable to your industry. Remember outsourcing an application and its data to a CSP does not include a transfer of the responsibilities that go with it. Pay particular attention to respect of the applicable privacy rules and regulations. You may want to check compliance with the EU Data Protection Directive (European Commission Data Protection web site) and the EU Proposed Directive on Network and Information Security (Frequently Asked Questions on the Proposed Directive on Network and Information Security).
- Vraag en antwoorden ronde.
- Bedankt voor uw aandacht!