Fulcrum Group- Layer Your DR/BC


Published on

Couple year old presentation advocating more layers of protection and recovery

  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

Fulcrum Group- Layer Your DR/BC

  1. 1. The Fulcrum Group Resiliency and Recovery Technologies By Steve Meek, CISSP, MCSE, CCNA
  2. 2. Agenda <ul><li>Definitions </li></ul><ul><li>Disasters and Incidents </li></ul><ul><li>Why DR-BC </li></ul><ul><li>Enterprise DR-BC </li></ul><ul><li>SMB DR-BC </li></ul><ul><li>Layer your Business Continuity </li></ul><ul><li>Exercise </li></ul><ul><li>Summary </li></ul>
  3. 3. Definitions <ul><li>Disaster </li></ul><ul><ul><li>A sudden, unplanned calamitous event causing great damage or loss. </li></ul></ul><ul><ul><li>Any event that creates an inability on an organization’s part to provide the critical business functions for some predetermined period of time </li></ul></ul><ul><li>Business Continuity </li></ul><ul><ul><li>The ability of an organization to continue to function even after a disastrous event, usually through the deployment of redundant hardware and software, the use of fault tolerant systems, as well as a solid backup and recovery strategy. </li></ul></ul><ul><li>Disaster Recovery </li></ul><ul><ul><li>The ability to recover from the loss of a complete site, whether due to natural disaster or malicious intent. Disaster recovery strategies include replication and backup/restore. </li></ul></ul>
  4. 4. Disasters <ul><li>Natural Disasters </li></ul><ul><ul><li>Tornadoes, Hurricanes, Wildfires, Thunderstorms & lightning </li></ul></ul><ul><ul><ul><li>Problem caused: electrical power loss </li></ul></ul></ul><ul><li>Man-made Disasters </li></ul><ul><ul><li>Plane crash, Hazardous Materials, House & Building fires, Nuclear power plant emergencies, Terrorism </li></ul></ul><ul><ul><ul><li>Problem caused: system unavailability, lack of access </li></ul></ul></ul>
  5. 5. Incidents <ul><li>Higher probability IT issues </li></ul><ul><ul><li>Accidental Deletion/Modification of Critical Data </li></ul></ul><ul><ul><li>Losing a laptop </li></ul></ul><ul><ul><li>Network Failure </li></ul></ul><ul><ul><li>Systems Software Failure </li></ul></ul><ul><ul><li>Hard Disk Subsystem Failure </li></ul></ul><ul><ul><li>Server Failure </li></ul></ul><ul><ul><li>Power Crisis </li></ul></ul><ul><ul><li>Theft or Sabotage </li></ul></ul><ul><ul><li>Virus Attack </li></ul></ul><ul><ul><li>Other security issue or attack </li></ul></ul><ul><ul><ul><li>Problems caused: varies </li></ul></ul></ul>
  6. 6. Enterprise DR-BC <ul><ul><li>Minimizing risk </li></ul></ul><ul><ul><li>After a major disaster an average company will lose at least 25 percent of the daily revenue in the first six days. (source: University of Texas) </li></ul></ul><ul><ul><li>Data is growing 50-80% per year (source: Gartner) </li></ul></ul>
  7. 7. DR-BC Loss Areas Indirect Costs Stock Price Reputation Market Share Brand Equity Customer Satisfaction Direct Costs Lost Revenue Lost Productivity Criminal Liability <ul><ul><li>More Than Revenue at Risk </li></ul></ul>
  8. 8. DR-BC Planning Benefits <ul><li>Minimizes potential economic loss and provide a sense of security </li></ul><ul><li>Reduce disruptions to operations </li></ul><ul><li>Minimizes the risk of delays and decision making </li></ul><ul><li>Provides for an orderly recovery </li></ul><ul><li>Reduces reliance on key employees </li></ul><ul><li>Ensures the safety of employees and customers </li></ul>
  9. 9. DR-BC Recovery Needs <ul><li>Amount of data loss acceptable </li></ul><ul><li>The point to which data must be restored </li></ul>RECOVERY POINT OBJECTIVE <ul><li>Amount of time it takes to come back online </li></ul><ul><li>The time by which data must be restored </li></ul>RECOVERY TIME OBJECTIVE Days Mins Hrs Wks Secs Recovery Point Mins Days Hrs Secs Wks Recovery Time
  10. 10. Recovery Tools Days Mins Hrs Wks Secs Mins Days Hrs Secs Wks Tape Restore Clustering Snapshots Replication Tape Backup Periodic Replication Snapshots HA Zone Recovery Point Recovery Time
  11. 11. Typical BCP <ul><li>No strategies or plans. </li></ul><ul><li>Little if any awareness. </li></ul><ul><li>Focused on technology. </li></ul><ul><li>Aware and acknowledge the need. </li></ul><ul><li>DR plans documented. </li></ul><ul><li>Strategies developed for some systems. </li></ul><ul><li>Cross enterprise recovery requirements understood. </li></ul><ul><li>Business Continuity Program in Place. </li></ul><ul><li>Business alignment </li></ul><ul><li>Executive focus </li></ul><ul><li>Crisis Mgt. Process </li></ul><ul><li>Regular testing </li></ul><ul><li>Multi point RTO / RPO </li></ul><ul><li>Regulatory and Supply Chain compliance </li></ul><ul><li>Value Derived with Customers </li></ul><ul><li>Business Requirement Validated </li></ul><ul><li>Monitored </li></ul><ul><li>Executive Dashboard </li></ul>High Low Medium Mature World Class Aware Capable Unfocused Each one of these maturity levels has different characteristics, techniques that are used and approaches.
  12. 12. SMB DR-BC Planning <ul><li>Network share is the most popular and least effective. </li></ul><ul><li>Backup should be the last line of defense </li></ul>Network Share 55% Users Copy Locally 7% PC Backup Software 7% Synch Products 4% Software Solution 6% Server Backup 6% No Solution 15%
  13. 13. SMBs and Backups <ul><li>Usually only backup provide: </li></ul><ul><ul><li>Cost-effective portability of data </li></ul></ul><ul><ul><li>Protection against complete data loss </li></ul></ul><ul><ul><li>Protection against viruses and data corruption </li></ul></ul><ul><ul><li>Managed multiple point-in-time copies of data </li></ul></ul><ul><ul><li>Integrated desktop/laptop protection </li></ul></ul><ul><li>Success requires you </li></ul><ul><ul><li>Check logs and ensure critical data included </li></ul></ul><ul><ul><li>Conduct periodic test restores </li></ul></ul><ul><ul><li>Use agents to capture “data in motion” </li></ul></ul><ul><li>Backup does not provide </li></ul><ul><ul><li>Instant access to data (short RTO) </li></ul></ul><ul><ul><li>Minimum data loss (short RPO) </li></ul></ul>
  14. 14. Layer your Business Continuity <ul><li>Cabling and Power </li></ul><ul><li>Infrastructure </li></ul><ul><li>Servers and services </li></ul><ul><li>PC and peripherals </li></ul><ul><li>Applications and Training </li></ul><ul><li>Network Monitoring and Management </li></ul>
  15. 15. Resiliency Levels <ul><li>Resiliency- Returning to original state </li></ul><ul><li>Internal Resiliency- Ability to recover, handling internal issues </li></ul><ul><li>Intra-site Resiliency- Ability to recover, handling issues with solutions at local site </li></ul><ul><li>Inter-site Resiliency- Ability to recover, handling issues that may impact local site (using 2 nd site or collocation facility) </li></ul>
  16. 16. Exercise <ul><li>Let’s build a company and protect it’s assets </li></ul>
  17. 17. Summary <ul><li>Start with Executive sponsorship </li></ul><ul><li>If struggling to get buy-in, focus on incidents, instead of disasters </li></ul><ul><li>Understand the importance of RPO and RTO </li></ul><ul><li>Don’t over rely on backups (last resort) </li></ul><ul><li>Layer your DR-BC environment for better resiliency </li></ul><ul><li>Get started today </li></ul><ul><ul><li>Audit your backups </li></ul></ul><ul><ul><li>Create System Documentation </li></ul></ul><ul><ul><li>Evaluate your resiliency </li></ul></ul><ul><ul><li>Think off-site for documentation, tapes, software media </li></ul></ul><ul><ul><li>Know when there is an issue- use event logs, syslogs, monitors, </li></ul></ul>
  18. 18. Questions and Giveaway <ul><li>Any questions? </li></ul>The Fulcrum Group 5600 Egg Farm Road, Suite 452, Keller, TX 76248 Phone: 817-337-0300 Web: www.fulcrumgroup.net