Disaster Prevention and Recovery Presented By: Sean Snodgrass and Theodore Smith

Learning Objectives  Define Disaster Prevention and Recovery and Business Continuity Planning  Identify their uses  Learn the importance of DRP, important considerations, and statistics  Recognize different levels and solutions  Advantages and disadvantages  Activity

Definition  Disaster Prevention (DP): The process of minimizing the risk of a disaster occurring. Pre-disaster steps taken.  Disaster Recovery (DR): The process of minimizing business operation downtime in the event of a disaster. Post-disaster steps taken.

Definition Business Continuity Planning: A practiced logical plan for how a company will recover and restore data in a specified period of time after a disaster.

Types of Disasters  Serious information security incidents  Equipment or system failure  Loss of utilities and services  Organized and/or deliberate disruption  Environmental disasters

Uses  Personal (Mozy Online Backup)  Business (offsite data centers)  Law Firms (Sarbanes-Oxley Act)  Government  Universities (here at OSU)

Why is DRP important?  Integral to business longevity  Useful tool  Mandated by law  Employee training

Statistics   Veritas Software, a subsidiary of Symantec, conducted a survey of more than 1,200 global managers in 2004   What would be the most devastating effects of a disaster for a company? Source:

Statistics   Only 38% of companies had DR or BC   Nearly 20% said company would be at stake   51% of respondents with DR had used their recovery plan within the past year.   Computer failure, hackers, viruses accounted for 63% of used plans

Statistics   More than 40% would have no idea how to resume business if primary data center lost.   On average, 72 hours to recover basic business functions after a fire.   $78,000 lost per hour on average (Disaster Recovery Journal estimate) Source:

Gartner Survey, Oct Picture Source: Witty, Roberta J. Disaster Recovery Journal, Fall Volume 19, Issue 4

Statistics  How often do you think most companies test their recovery systems?  Annually  Semi-annually  Quarterly  Never

Picture Source: Witty, Roberta J. Disaster Recovery Journal, Fall Volume 19, Issue 4

Considerations   Costs   Threats and BIA   Mission critical business functions   Recovery Time Objective (RTO)   Recovery Point Objective (RPO)   Systems   People Source:

DRP Solutions   Data storage/duplication methods   Tape backup   Electronic vaulting   Periodic data backup   Mirroring Picture Source:

DRP Solutions   Software   Facilitates data and systems recovery   Automated or user commanded synchronization.   Also used in BCP

DRP Solutions   Cold site   Offsite storage facility with basic infrastructure   No data recovery   Long recovery time   Low cost Source: Processor Editorial Article “Hot, Warm, or Cold,” September Vol. 17 Issue 35: Picture Source:pulickal.files.wordpress.com/.../emptyrm-b.jpg

DRP Solutions   Hot site   Offsite facility, fully mirrored data center   Minimal data loss   Nearly instantaneous recovery   High cost Source: Processor Editorial Article “Hot, Warm, or Cold,” September Vol. 17 Issue 35:

Picture source:

DRP Solutions   Warm site   In between hot and cold sites   Partially functional data center   Periodic data replication   Lower cost relative to hot sites Source: Processor Editorial Article “Hot, Warm, or Cold,” September Vol. 17 Issue 35:

DRP Solutions   Mobile On-site   Mobile data center   Flexible   Limited space   Suitable for smaller recoveries   Keeps employees close to home Picture source:

DRP Solutions   Quick-ship   Solution implied in name   Third-party vendor   Temporarily leased equipment

Advantages and Disadvantages Disadvantages:  Very costly (hospitals pay between grand per year)  Needs constant maintenance  Will not be successful if everyone is not involved  Like insurance Advantages:  Saves huge amounts of money if a disaster occurs  Can be used to help other business functions

Conclusion  DR is highly tailored to individual company’s needs  DR implementation is on the rise, trending towards warm sites  When fully utilized can save companies money  Useful for anyone in the business world to be aware of