Co-location Sites for Business Continuity and Disaster Recovery Peter Lesser (212) Peter Lesser (212) Kraft Kennedy & Lesser, Inc. 360 Lexington Avenue New York, NY Kraft Kennedy & Lesser, Inc. 360 Lexington Avenue New York, NY 10017

K raft Kennedy Lesser & Inc. AgendaAgenda  Business Continuity  Elements  Technologies  Case Study - Skadden’s Approach  Concept  Adoption  Design  Implementation Status  August 14 – 17, 2003  Top 10 Lessons Learned  Q & A  Business Continuity  Elements  Technologies  Case Study - Skadden’s Approach  Concept  Adoption  Design  Implementation Status  August 14 – 17, 2003  Top 10 Lessons Learned  Q & A

K raft Kennedy Lesser & Inc. Business Continuity Elements  High Availability  Fault Tolerance  Disaster Recovery  High Availability  Fault Tolerance  Disaster Recovery

K raft Kennedy Lesser & Inc. Business Continuity Elements  Data Availability  Systems Availability  Ubiquitous Access  Business Continuity Plan  Data Availability  Systems Availability  Ubiquitous Access  Business Continuity Plan

K raft Kennedy Lesser & Inc. Business Continuity Technologies  Basic Hardware - Redundancy  Environmental - UPS & A/C  Network - HSRP  Storage - SANs  Servers - Server Clustering  Data - Replication  Clients - Thin and Thick/Cached  Printers - IP Printing  Data Centers – Co-location and DR/BC Hot-Site  Basic Hardware - Redundancy  Environmental - UPS & A/C  Network - HSRP  Storage - SANs  Servers - Server Clustering  Data - Replication  Clients - Thin and Thick/Cached  Printers - IP Printing  Data Centers – Co-location and DR/BC Hot-Site

Skadden Arps Concept

K raft Kennedy Lesser & Inc. MissionMission To create systems redundancies which aim to eliminate interruptions in service attributable to:  Data center component failure  Data center facility failure  Communications link failure  Building becomes temporarily or permanently inaccessible To create systems redundancies which aim to eliminate interruptions in service attributable to:  Data center component failure  Data center facility failure  Communications link failure  Building becomes temporarily or permanently inaccessible

K raft Kennedy Lesser & Inc. AssumptionsAssumptions The plan directs investments toward protecting firm applications deemed most critical. Critical applications are defined as those which pose the most risk to firm operations should they become unavailable for any period of time. They are:  Messaging  Document Management and Document Processing  Time Entry  Litigation Systems  Contact Management  Conflicts The remaining less critical applications will be restored as needed if an outage is determined to be long-term. The plan directs investments toward protecting firm applications deemed most critical. Critical applications are defined as those which pose the most risk to firm operations should they become unavailable for any period of time. They are:  Messaging  Document Management and Document Processing  Time Entry  Litigation Systems  Contact Management  Conflicts The remaining less critical applications will be restored as needed if an outage is determined to be long-term.

K raft Kennedy Lesser & Inc. Capabilities as of 2000/1 Standard top tier law firm practices. The firm’s data centers are protected by:  Fire control systems  Temperature control systems  Physical security systems  Uninterruptible power supplies Hardware components are protected by: Hardware components are protected by:  Duplicate power supplies  Duplexed/RAID hard drives  Redundant Internet access communications facilities Firm data is protected by tape backup procedures and data is regularly moved to off site storage. No real time ability to utilize that data in case of systems failure. Standard top tier law firm practices. The firm’s data centers are protected by:  Fire control systems  Temperature control systems  Physical security systems  Uninterruptible power supplies Hardware components are protected by: Hardware components are protected by:  Duplicate power supplies  Duplexed/RAID hard drives  Redundant Internet access communications facilities Firm data is protected by tape backup procedures and data is regularly moved to off site storage. No real time ability to utilize that data in case of systems failure.

K raft Kennedy Lesser & Inc. Options for increased capabilities  Establish disaster recovery hot-site.  Establish primary data centers serving as “hot- sites” for each other.  Establish redundant off-site data centers.  Establish disaster recovery hot-site.  Establish primary data centers serving as “hot- sites” for each other.  Establish redundant off-site data centers.

K raft Kennedy Lesser & Inc. Disaster Recovery Hot-Site Advantages:  Protects multiple offices from disaster in any single location.  Hot-site is easily scaled to backup addition applications or locations.  No reliance on communications for normal operations. Disadvantages:  Does not provide full systems recovery.  Does not protect from component failure.  Does not leverage economies of consolidation.  Requires large distributed IT staff.  Solution is disruptive to implement. Advantages:  Protects multiple offices from disaster in any single location.  Hot-site is easily scaled to backup addition applications or locations.  No reliance on communications for normal operations. Disadvantages:  Does not provide full systems recovery.  Does not protect from component failure.  Does not leverage economies of consolidation.  Requires large distributed IT staff.  Solution is disruptive to implement.

K raft Kennedy Lesser & Inc. Internal Hot-Sites Advantages:  Allows for rapid recovery.  Leverages existing firm locations.  Reduces space required for some data centers.  Reduces efforts for some systems upgrades. Disadvantages:  Need to acquire significant additional space in primary locations.  Existing locations do not have ideal facilities.  Does not fully leverage economies of consolidation.  Requires distributed high level IT staff.  Solution is most disruptive to implement.  Solution is most time consuming to complete.  Must invest in redundant communications links from small offices to consolidated data centers. Advantages:  Allows for rapid recovery.  Leverages existing firm locations.  Reduces space required for some data centers.  Reduces efforts for some systems upgrades. Disadvantages:  Need to acquire significant additional space in primary locations.  Existing locations do not have ideal facilities.  Does not fully leverage economies of consolidation.  Requires distributed high level IT staff.  Solution is most disruptive to implement.  Solution is most time consuming to complete.  Must invest in redundant communications links from small offices to consolidated data centers.

K raft Kennedy Lesser & Inc. Redundant Off-Site Data Centers Advantages:  Allows for rapid recovery.  Reduces space required for in office data centers.  Allows data centers to be located in less expensive locations.  Allows data centers to be located in buildings with enhanced facilities.  Increases in DR protection are realized during implementation process.  Allows for IT staff consolidation.  Allows for simplification of systems design.  Dramatically reduces efforts for systems upgrades.  Dramatically reduces time to support new locations.  Requires smallest amount of hardware and software.  Solution is least disruptive to implement. Disadvantages:  Must invest in redundant communications links from all offices to data center locations.  Must invest in redundant communications links from all offices to data center locations. Advantages:  Allows for rapid recovery.  Reduces space required for in office data centers.  Allows data centers to be located in less expensive locations.  Allows data centers to be located in buildings with enhanced facilities.  Increases in DR protection are realized during implementation process.  Allows for IT staff consolidation.  Allows for simplification of systems design.  Dramatically reduces efforts for systems upgrades.  Dramatically reduces time to support new locations.  Requires smallest amount of hardware and software.  Solution is least disruptive to implement. Disadvantages:  Must invest in redundant communications links from all offices to data center locations.  Must invest in redundant communications links from all offices to data center locations.

K raft Kennedy Lesser & Inc. RecommendationRecommendation Implement Redundant Off-Site Data Centers  Provides most comprehensive and highest levels of protection against data center and building disasters.  Option best meets defined mission.  Utilizes financial industry best practices. Implement Redundant Off-Site Data Centers  Provides most comprehensive and highest levels of protection against data center and building disasters.  Option best meets defined mission.  Utilizes financial industry best practices.

Skadden Arps Adoption

K raft Kennedy Lesser & Inc.

K raft Kennedy Lesser & Inc.

K raft Kennedy Lesser & Inc. Strengths & Weaknesses of Current System Architecture Advantages:  DMS and messaging are decentralized. Failure in one office does not affect the rest of the Firm.  DMS and messaging are not dramatically affected by local communications link failure. Disadvantages:  Minimal system redundancy.  Vulnerable to local system and power outages.  Firm data is protected by tape backup only.  No real time ability to utilize data in case of system failure.  Maximum of days to weeks of downtime and 24 hours of data loss. Advantages:  DMS and messaging are decentralized. Failure in one office does not affect the rest of the Firm.  DMS and messaging are not dramatically affected by local communications link failure. Disadvantages:  Minimal system redundancy.  Vulnerable to local system and power outages.  Firm data is protected by tape backup only.  No real time ability to utilize data in case of system failure.  Maximum of days to weeks of downtime and 24 hours of data loss.

K raft Kennedy Lesser & Inc. Strengths & Weaknesses of Future System Architecture Advantages:  Allows for rapid recovery.  Reduces space required for in office data centers.  Allows data centers to be located in less expensive locations.  Allows data centers to be located in buildings with enhanced facilities.  Increases in DR protection are realized during implementation process.  Allows for IT staff consolidation.  Allows for simplification of systems design.  Dramatically reduces efforts for systems upgrades.  Dramatically reduces time to support new locations.  Requires smallest amount of hardware and software.  Solution is least disruptive to implement. Disadvantages:  Must invest in redundant communications links from all offices to data center locations.  Must invest in redundant communications links from all offices to data center locations. Advantages:  Allows for rapid recovery.  Reduces space required for in office data centers.  Allows data centers to be located in less expensive locations.  Allows data centers to be located in buildings with enhanced facilities.  Increases in DR protection are realized during implementation process.  Allows for IT staff consolidation.  Allows for simplification of systems design.  Dramatically reduces efforts for systems upgrades.  Dramatically reduces time to support new locations.  Requires smallest amount of hardware and software.  Solution is least disruptive to implement. Disadvantages:  Must invest in redundant communications links from all offices to data center locations.  Must invest in redundant communications links from all offices to data center locations.

Skadden Arps Design

K raft Kennedy Lesser & Inc. Availability & Disaster Recovery Goals High Availability Requirement Application Disaster Recovery Requirement Data Loss………..… Recovery time…….. Disconnects……..…000Critical Data Loss…….….. Recovery Time….. 1/2 hour 2 hours Data Loss………..… Recovery Time……. 00 Very Important Data Loss…….….. Recovery Time….. 2 hours 4 hours Data Loss………..... RecoveryTime…… hrs Important Data Loss…..……. Recovery Time.…. 24 hours 72 hours

K raft Kennedy Lesser & Inc. Management Goals  Reduce Systems Management Effort  Improve Consistency  Reduce Infrastructure Upgrade Effort  Reduce Time to Support New Applications  Reduce Time to Establish and Support New Locations  Reduce Systems Management Effort  Improve Consistency  Reduce Infrastructure Upgrade Effort  Reduce Time to Support New Applications  Reduce Time to Establish and Support New Locations

K raft Kennedy Lesser & Inc. Primary Data Center

K raft Kennedy Lesser & Inc. Secondary Data Center

K raft Kennedy Lesser & Inc. Communications Design

Implementation Status Data Center I:December 1 st, 2002 Data Center II:February 1 st, 2003 Live Users:1500+ Data Center I:December 1 st, 2002 Data Center II:February 1 st, 2003 Live Users:1500+

August 14 – 17, 2003  No Primary Data Center Outages  Migration of “Central Applications”  No Primary Data Center Outages  Migration of “Central Applications”

Top 10 Lessons Learned

K raft Kennedy Lesser & Inc. #10 Think Outside the Box

K raft Kennedy Lesser & Inc. #9 Define your own 9’s Separate High Availability and Disaster Recovery

K raft Kennedy Lesser & Inc. #8 Replication Comes in Many Shapes and Sizes

K raft Kennedy Lesser & Inc. #7 Use Citrix MetaFrame and WTS as Your Swiss Army Knife

K raft Kennedy Lesser & Inc. #6 Now is the Time for a Better, Faster, Cheaper WAN

K raft Kennedy Lesser & Inc. #5 Leverage Your Vendors

K raft Kennedy Lesser & Inc. #4 Distributed Computing is an IT Burden

K raft Kennedy Lesser & Inc. #3 Some Data Centers Do Not Need a Park Avenue Address, a View or Even an IT Staff

K raft Kennedy Lesser & Inc. #2 Think Like a Lawyer

K raft Kennedy Lesser & Inc. #1 You Can Never be Too Rich, Too Good Looking or Have Too Much Project Management

Questions & Answers