Business Continuity Technology Peter Lesser lesser@kkl.com (212) 692-5617 Kraft Kennedy & Lesser, Inc. 360 Lexington Avenue New York, NY 10017

Agenda Kraft Kennedy & Lesser Business Continuity Planning Business Continuity Technology Q & A

Kraft Kennedy & Lesser Founded in 1988 Dedicated to legal community Consulting Systems Integration Offices in New York, Houston and San Francisco 50+ Consultants

Kraft Kennedy & Lesser Representative Clients

BUSINESS CONTINUITY PLANNING

Business Continuity Planning Facilities Human Resources Information

Facilities National Office Local Offices Critical Firm Functions Space Critical Office Functions

Human Resources National Office Emergency Management Team Manual Local Office Emergency Management Team Manual Local Office Emergency Preparedness Employee Manual

Information Current storage locations Paper Electronic Desk-side files Office Records Centers Office safes Off-site storage vendors Electronic Messaging Document Manage Various Systems Protection mechanisms Off-Site Storage Image critical documents Technology

BUSINESS CONTINUITY TECHNOLOGY PLANNING

Mission To create systems redundancies which aim to eliminate interruptions in service attributable to: Data center component failure Data center facility failure Communications link failure Building becomes temporarily or permanently inaccessible

Assumptions The plan directs investments toward protecting firm applications deemed most critical. Critical applications are defined as those which pose the most risk to firm operations should they become unavailable for any period of time. They are: Messaging Document Management and Document Processing Time Entry Litigation Systems Contact Management Conflicts The remaining less critical applications will be restored as needed if an outage is determined to be long-term.

Current Capabilities Standard law firm practices. The firm’s data centers are protected by: Fire control systems Temperature control systems Physical security systems Uninterruptible power supplies Hardware components are protected by: Duplicate power supplies Duplexed/RAID hard drives Redundant Internet access communications facilities Firm data is protected by tape backup procedures and data is regularly moved to off site storage. No real time ability to utilize that data in case of systems failure.

Strengths & Weaknesses of Current System Architecture Advantages: Systems are decentralized. Failure in one office does not affect the rest of the Firm. Systems are not dramatically affected by local communications failures. Disadvantages: Minimal system redundancy. Vulnerable to local system and power outages. Firm data is protected by tape backup only. No real time ability to utilize data in case of system failure. Maximum of days to weeks of downtime and 24 hours of data loss.

Availability & Disaster Recovery Goals High Availability Requirement Application Disaster Recovery Requirement Data Loss ………..… Recovery time…….. Disconnects……..… Critical Data Loss …….….. Recovery Time….. 1/2 hour 2 hours Recovery Time……. Very Important 4 hours Data Loss ………..... RecoveryTime…….. 24 hrs Important Data Loss …..……. Recovery Time .…. 24 hours 72 hours

Management Goals Cost Containment Reduce Systems Management Effort Improve Consistency Reduce Infrastructure Upgrade Effort Reduce Time to Support New Applications Reduce Time to Establish and Support New Locations

Options for increased capabilities Implement local high availability technologies. Establish current data centers as “hot-sites” for each other. Establish disaster recovery hot-site. Relocate technology infrastructure to redundant off-site data centers.

Advanced High Availability Technologies Environmental Protection Hardware Component Redundancy Clustering Storage Thin Client Virtualization Consolidation Centralization Caching Replication Backup

Internal Hot-Sites Advantages: Disadvantages: Allows for rapid recovery. Leverages existing firm locations. Reduces space required for some data centers. Reduces efforts for some systems upgrades.   Disadvantages: Need to acquire significant additional space in primary locations. Existing locations do not have ideal facilities. Does not fully leverage economies of consolidation. Requires distributed high level IT staff. Solution is most disruptive to implement. Solution is most time consuming to complete. Must invest in redundant communications links from small offices to consolidated data centers.

Disaster Recovery Hot-Site Advantages: Protects multiple offices from disaster in any single location. Hot-site is easily scaled to backup addition applications or locations. No reliance on communications for normal operations. Disadvantages: Does not provide full systems recovery. Does not protect from component failure. Does not leverage economies of consolidation. Requires large distributed IT staff. Solution is disruptive to implement.

Redundant Off-Site Data Centers Advantages: Allows for rapid recovery. Reduces space required for in office data centers. Allows data centers to be located in less expensive locations. Allows data centers to be located in buildings with enhanced facilities. Increases in DR protection are realized during implementation process. Allows for IT staff consolidation. Allows for simplification of systems design. Dramatically reduces efforts for systems upgrades. Dramatically reduces time to support new locations. Requires smallest amount of hardware and software. Solution is least disruptive to implement. Disadvantages: Must invest in redundant communications links from all offices to data center locations. 

Recommendations

BUSINESS CONTINUITY TECHNOLOGY

Environmental Protection HVAC Fire Suppression Water Detection Uninterruptible Power Supply Generator Access Security

Hardware Component Redundancy Power Supplies Fans Memory (Parity/Chipkill) NICs HBAs Disk Drives LAN Switches Backbone Cable Riser Shafts

Clustering Fault Tolerant Hardware Operating System Clustering Application Clustering

Storage Tape Local Storage NAS SANs SCSI FC iSCSI Boot from SAN

Thin Client Windows Terminal Server Citrix Browser

Virtualization VMware Microsoft HW Partitioning OS Partitioning

Consolidation Blade Servers Clusters Virtual Servers Server Consolidation Minimize Support Efforts Improved Realization of Availability Costs

Centralization Reduced Number of Servers Reduced Storage Overlap Centralized Support Simplified Replication

Caching Messaging Document Management Supports Users Remote from Systems Supports Centralization Supports Consolidation

Replication Data Redundancy Minimal Value without Systems Minimal Value without Access Operating Systems SAN to SAN Dedicated Communications vs. IP Bandwidth Required

Backup Disk to Disk/Virtual Tape Three Tier Tape Libraries On-Line Backup at Secondary Site

Wide Area Network Technology Performance Diversity Managed Service Traditional IP Fiber Performance Bandwidth Latency Diversity WAN carrier Local Exchange carrier Point of entry (as possible) Inside wiring Managed Service

Questions & Answers