Why and What are Data Movement Solutions for Continuous Business Roselinda R. Schulman, CBCP Worldwide Sales Storage Support

What is Business Continuity? Continuous Business = Staying in Business –Business Continuity Planning is what companies do to ensure that they can continue operations in the face of planned and unplanned ‘events’. –Provisions for business continuity are driven by an understanding of… Business impact: assessing the impact of ensuring continuous business Business processes/risks: assessing the frequency and/or likelihood of planned and unplanned events Data/availability protection is only one part of business continuity (don’t forget about business- critical processes, logistics, recovery execution plans, etc)

The DR Dynamics of Change The early 1990s the best companies expected to recover their business operations in three days to within 24hrs of the disaster Between 1997 and 2000 the best companies expected to recover within 24hrs with minimal loss of data at the point of disaster The internet driven world has changed all this.. The best companies need to have near zero recovery times with no data loss….

WTC Bombing Fact - When the world Trade Centre was bombed in 1993 with relatively minor damage 150 companies went out of business….

What is expected from your business If your business does not meet these expectations… –Financial loss will occur - $100K minimum per hour –Potential Asset loss - Information –Liability - Suppliers, Customers and Regulators –Customer Loss –Brand Name or Reputation damage –Investor/Stock Market confidence loss…. Not all these can be measured financially but all will have an effect on the companies bottom line….

Cost of Downtime by Industry Sector Source: Meta Group, 10/2000

Other Considerations Its not just Incidents on the scale of September 11th that can impact your business…. –ASX - Australian Stock Exchange - Failed Software Upgrade - 2 Hrs –Virus Attacks Yahoo eBay CCN AOL –London Stock Exchange - Human Error - Online trading system down all day

Your critical data needs to be protected from: Human error or sabotage –Feb ‘00 - DDoS attacks against eBay, Amazon and Yahoo Data corruption Hardware failures –Sept 00’- Power Outage at an airlines main operations centre played havoc with computers that control air traffic, delaying or affecting flights across the US. Software glitches Advanced Notice (Planned) Outages Sudden (Rolling) Disasters Lingering (Duration) Outages

Terminology Risk Analysis –Identification of threats Business Impact Analysis –Establish Value, identify critical resources, establish priority Recovery Time Objective –Time within which Business Functions or Applications must be restored. Includes time before disaster declared and time to perform tasks Recovery Point Objective –The Point in time to which data must be restored to successfully resume processing –Often thought off as time between last backup and when outage occurred

Where Are You Today Have you recently conducted –BIA, Risk Analysis, Critical records analysis Correlate Cost vs. Risk –Cost Cost of Re-Creating data and transactions Cost of Technologies - storage, network, platforms Re-engineering costs associated with infrastructure refresh –Risk Likelihood of event Cost of downtime ( monetary and reputation) regulatory/legal penalties for non-compliance Competitive (dis)advantages

Some Considerations to Start Solution must meet your goals and objectives –Realistic Expectations need to be set The Business need will be defined by things like the BIA and Risk Analysis Subject expertise What groups/departments are involved –Network, Auditing, Business line Look at educating different groups within your organization so they better understand some of the issues

Traditional Disaster Recovery Timeline Activate Recovery Site Restore Network IPL and synchronize operating systems Load On-Line Databases Begin Staging Applications for First Day Forward recover On-Line Files with Transaction Journals Batch Cycle-Load Application batch files Start On-Lines Hours- Applications start and continue processing integrated cycles until batch cycles with calendar Date

Advanced Disaster Recovery Electronic Vaulting Files transmitted on a regular basis Remote Journaling Remote Mirroring –Real-Time Remote Copy Hot Standby Site Active/Active Sites (Clustering, GDPS)

Some More terminology Real Time Copy –Refers to the mirroring of data, –Should provide an IO consistent copy of that data. –Every Update is Replicated Point-in-Time Copy (PiT) –refers to a copy of data that that is taken at a specific point in time. Ideally this copy should be IO consistent. –PiT copies are used in many ways including backups and checkpoints. –More recently PiT copies are used as part of architected disaster recovery solutions. NanoCopy

Disaster Recovery Tiers: Definitions Tape Back-Up – A Point-in-Time back-up is made to tape and sent off- site. Available System – System must be available at time of incident Remote Logging – Either to Tape or Disk Active System – System is available and software is loaded, ready to run and is often required to run software such as HXRC Recovery Time Objective (RTO)– Time to resume operation at secondary IT facility… this is the duration of the service interruption. Recovery Point Objective(RPO) – Worst case time between last back- up and interruption time.

Diversity in Data Protection Requirements Different Types of Data Require Different Levels of Protection Data Audit Required to Assess Business Criticality, and Cost to Recover Completely Duplicated/ Interconnected hot-site Remote Disk Mirroring Disk Mirroring Shared Disk Single Disk Copy Electronic Vaulting Tape On-site Tape Back-up Off-site (trucks) Disk Consolidation More Less Delayed Immediate More Less Amount of Data Recovery Time Importance of Data

Recovery Tiers – What is the right one There is no wrong one More important is meeting the objectives Have you other options other than Real-Time replication –If you have a 24 hour RPO you may not need it The higher the tier, typically the greater the cost and complexity Combinations or hybrids may be appropriate

Considerations when Architecting Continuous Business Solutions Planning, Planning Planning Document, Document, Document Solutions must accommodate multiple environments and Businesses What is the right solution –software, hardware, real-time, PiT, multiple Careful analysis is required –Application types, amount of data –Performance requirements, remote site location –Transmission capability/cost –What are the future requirements

Solution Design Detailed Assessment Typically Required –Questionnaire/Interviews –Planning Session –Performance data –Data Analysis How Much, Where, Placement Current Infrastructure Will need to match goals and objectives along the the cost Customers may have to consider reengineering of applications or placement of data May take a couple of iterations and customer feedback before final design

Real-Time Mirroring Technologies Options for Consideration –Synchronous Remote Copy –Asynchronous Remote Copy –Hardware based –Software Based –Log Replication –Application Level Copy All are Viable –Depends on Many Factors Performance, Cost, type of data, platform etc.

And it doesn't end there Make sure you have a Baseline Change control is critical –Impact must be carefully considered –Procedures need to be up to date Ongoing monitoring of environment –Network –Subsystem response time Disaster Recovery Testing –Frequency –Document and fix

“A 22-hour Blackout … Cost Ebay up to $5 Million in Forgone Revenue and a $4 Billion Slide in Market Value, and” Two Weeks Later “Not Yet Fully Recovered.” Forbes, July Ebay’s eProfile: Over 2 Million Items Tracked 300,000 Additions a Day 1 Million Visitors a Day 600 Bids a Minute The June 10th Crash Damaged Ebay’s Reputation and Caused a 26% Plunge in Stock Price by June 14th. It’s Only Swapping Beanie Babys & Fiesta Ware More Real World

Thank You Questions?