Hosted by Keep Data at a Distance Disaster Recovery for the "New Realities” Presented by: Damian Walch, CISA, CISSP, MBCI T-Systems, Inc.

Hosted by “Internalization” “Although the hot site market is ‘inelastic’ there is a rapidly increasing availability of internal hot site solutions for certain types of customers depending on their size, their needs and the computer equipment that they use.” U.S. District Court Judge Ellen Huvelle, describing the hot site market during Sungard Data Systems’ bid to acquire Comdisco Availability Services

Hosted by Alternate Site Strategies Are companies really moving to internal strategies? Does the internal strategy work? Is there a specific industry that does it more than another? DRJ Survey May, 2002 – 2,204 respondents

Hosted by Agenda Reasons for the Trend Considerations Cost-Benefit Approach Typical Pitfalls Examples and Approaches

Hosted by Why Only 20% of G2000? What are your recovery time objectives? 24 hours or LESS! How quickly can we recover our MOST critical systems? 72 hours or MORE! Collaboration

Hosted by Top 5 Reasons for Trend 5. Can’t Keep Up with Our Technology! 4. We’re Too Complex and Interdependent 3. You’re Going to Charge How Much for Technical Support and Floor Space? 2. No Control (all approaches have pitfalls) First come, first serve Guaranteed access

Hosted by #1 Reason for Internal Recovery Time Objectives are shrinking… …and there is enabling technology that assists us in achieving recovery times!

Hosted by Types of Technology Solutions Enterprise Storage Solutions SRDF GDPS, XRC, PPRC HXRC Remote Journaling Standby Operating System Standby Database Database Shadowing Replication Location 1 Symmetrix SBOS Oracle Standby Data Base Oracle Log Apply Symmetrix SRDF Links - T1 capacity Synchronous Mode Enabled BCV’s SAP R/3 Oracle DBMS Location 2

Hosted by #1 Reason Nobody Thinks Of Companies won’t declare disasters for almost 100% of the most common causes of interruptions! They’re ONLY used for natural disaster and catastrophic events!

Hosted by Considerations Asset protection and replacements Infrastructure and data protection Operational recovery Process/Application: internal Process/Application continuation: external Continuity Recovery Protection Business continuity strategies MUST address all aspects of IT infrastructure, from basic asset protection and replacement to ensuring application continuity for internal operations and third parties.

Hosted by Considerations Asset protection and replacements Infrastructure and data protection Operational recovery Process/Application: internal Process/Application continuation: external Load-Balancing Fail-Over Replication Mirroring HOT SITE SOLUTIONS Hot Site Solutions DO have a place, but DO NOT apply them to the wrong business problem (e.g. recovery objective).

Hosted by Considerations Determine what recovery of full compliment would cost with a commercial hot-site provider. Do they have all the equipment in one spot? What is the most important thing for commercial hot site providers? People Test Time - Do you ever get it when you want it? Floor Space, how much does it cost?

Hosted by Cross-Tab Label 0/0 Does your company recover “internally” or are you considering an internal recovery strategy? 1.Yes 2.No Hosted by

When is Internal Obvious? Do you have two or more data centers? Are they within 300 miles of each other? Do you have space available (growth projections)? Do at least two of your applications require recovery in less than 12 hours? Do you have a robust wide- area network? Do you have significant excess capacity for testing and development of applications?

Hosted by How Close is TOO Close? Different power grid Network and carrier diversity Can you get your staff there? DRJ Survey January, 2002 – 874 respondents

Hosted by Positives and Negatives DedicatedShared No Pre-Determined Exit~ 6 week recovery Easier to TestScheduling Tests Internal ResourcesContact, Follow-Up Positives Negatives Obvious plus and minus to a vendor solution.

Hosted by Compare the Costs Hot-Site Solution Dedicated Solution

Hosted by Compare the Costs Must pay for perceived “low- value” items like cabinets and floor space. Extra test-time costs money and is difficult to schedule. Acquired new technology and reallocated servers (from test & development). Having more flexibility for testing SHOULD increase the ease and # of tests. Increase in network is required. Work area Recovery is still required; however, other offices could be leveraged. Hot-Site Solution Dedicated Solution

Hosted by Typical Pitfalls All or nothing analysis Don’t consider evolving the solution Forget about the business functions Change management No Testing Using it for Production/Load Balancing

Hosted by Typical Pitfalls Don’t include all components of information flow Login and authentication Application servers “Bolt-on” servers You MUST do the marketing! TECHNOLOGY BUSINESS Database Server Application Server Web Servers Firewall Networ k

Hosted by Debunking Myths Pulling attention away from “core competencies”. Why would you want to create “business continuity experts”? Pace of change in IT – can’t refresh! You need multiple copies of data.

Hosted by Reasonable Potential Strategies Mirroring critical data Directory Services Vaulting Backups Recovery Allow the strategies to evolve, it DOES NOT have to be all or nothing. Review criticality and then implement the appropriate solution!

Hosted by Conclusion It does make sense sometimes! Don’t be emotional, but logical about decision. People, procedures, data and network should be the same for either method. Evolution – implement solutions slowly while still covered by hot site. Use the resources available to you.