1. Disaster Recovery & Secure Backups
Information Security and Privacy Office
Additional presentation details, such as date,
location, names, etc. in Palatino 14 pt Regular

2. Table of Contents Disaster Recovery/ Contingency Planning
Definitions
Evaluate System(s)
Secure Backup
Why You Should Backup
Partners Approved Backup Options
Non-standard Devices
Standard Devices
Resources

3. Disaster Recovery/ Contingency Planning

4. Disaster Recovery/ Contingency Planning
Disaster: The loss or major interruption (e.g. loss of availability, severe degradation in service) of one or more critical application systems that would significantly impact a Business Unit within Partners HealthCare and/or its affiliates, up to and including the loss of the Primary and/or Alternate Data Center.
Disaster Recovery Plan (DRP): is a document that details an application’s current state including servers, storage, contacts, and dependencies. The plan also includes the technology and architecture used to enable recovery at an alternate data center. These plans include the process and resources required to recover application functions and/or supporting infrastructure or non- infrastructure application(s). 
Contingency plan: is a course of action designed to help an organization respond effectively to a significant future event or situation that may or may not happen. A contingency plan is sometimes referred to as "Plan B," because it can also be used as an alternative if expected results fail to materialize.

5. Evaluate System(s) Current Configuration
How many workstations, servers, scientific equipment
Where are they located?
Institution Rooms
Offsite Institutions or Server Rooms
Non-PHS locations (Home, Vendor)
Diagram
Operating Systems
Backups

6. Secure Backup

7. Why You Should Backup
It is important to backup your data because data loss can happen at any time in many different ways!
The most common causes are a technical failure, power failure, accidental error, theft or disasters like fire, flood, etc.
Also, the growing cyber threats is increasing. If your machine gets infected with malicious software, your data can be lost or corrupted.

8. PH-540 Data Backup and Storage
Backup copies of all EPHI on Partners HealthCare electronic media and information systems must be made regularly. This includes both EPHI received by Partners HealthCare and created within Partners HealthCare.
Information systems and electronic media include: computers (both desktop and laptops), floppy disks, backup tapes and cartridges, CD-ROMs, zip drives, portable hard drives and PDAs.
Partners HealthCare must have adequate backup systems that ensure that all such EPHI can be recovered following a disaster or media failure.  
These systems must be regularly tested.
The backup media containing EPHI at the remote backup storage site must be given an appropriate level of physical and environmental protection consistent with the standards applied to EPHI physically at Partners HealthCare.

9. Backup Resources
ERIS has a wide variety of data backup solutions that can meet the needs of the research community at Partners. There are a number of options available, providing various levels of high performance, high density and high availability. ERIS will gladly assist you with finding the right solution to meet your price and usage requirements.

10. Non-Standard Devices

11. Crashplan Desktop Backup
The Crashplan Desktop Backup Service provides secure, central back up to two different Partners Data Centers. This solution is for work related data (system files are excluded) for Macintosh, Windows or Linux desktop or laptop computers. This system does not back up Partners “Standard” PC computers. For a backup to complete, the computer must be connected to the Partners Network either via a wired, wireless (PHSWIFI3) or while connected over VPN.   
Two desktop backup options:
Individual Desktop Backup Service: This service will backup the user account from which you install the Crashplan backup software.  Users login to the backup application using their Partners username and password.
Shared/Lab Desktop Backup Service: This service backs up multiple user accounts that exist on the same computer.  The shared computer is configured with an additional account with all accounts on that computer having access to all backed up data.  A separate username and password for the application is issued in these circumstances that is NOT an individual's Partners username/password.

12. Crashplan Desktop Backup- Cont.
Features:
Automatically backs up changed data every 15 minutes, stored locally if offline, synched to the repository once online and connected to Partners
Live data is stored forever. Deleted files retained for 90 days
Lost files can be recovered without having to call anyone
Multi-Destination Backup: The Crashplan application will  backup files to 2 geographical locations. If one location is down, the other has your data
Data De-duplication
Backup Open Files
Compression
Encryption: 448-bit Blowfish encryption (in transit and at rest)
Continuous data protection (CDP)
Backup to a External Drive for added protection
1 TB backup Limit
Cost:
$5 per computer per month
Research funds only
Non-research sundry funds, Hospital Cost Centers and Physician Org. funds require finance approval (please contact us).
How do I sign up for this service?
Visit Partners Research Information Services & Computing website:

13. Crashplan Server Backup
This service provides backup for Macintosh, Windows and Linux servers and workstations. One account is used to backup all your workstations/servers. You select what files/folders you want to backup. Once you signup ERIS will send you a custom username and password to your account that is NOT your Partners username/password. This system does not back up Partners “Standard” PC workstations.
The system requiring backup must be connected to the Partners Network via wired, wireless (PHSWIFI3) or while connected on VPN in order to be backed up. 

14. Crashplan Server Backup- Cont.
Supported Systems:
How do I sign up for this service?
Visit Partners Research Information Services & Computing website: OS
Hardware
Versions
Linux
1 GHZ+ x86-64 CPU 1GB Memory 250MB free drive space  
or newer 2.6 series kernel Oracle (Sun) Java version 1.6+ glibc 2.4+, cpio, Xorg, SWT
Mac
1 GHZ+ G4, G5, or Intel CPU 1GB Memory 250MB free drive space
10.9, 10.10,  
Windows
1 GHZ+ CPU 1GB Memory 250MB free drive space
Server 2008/2012

15. Standard Devices

16. Partners TSM Backup
Partners Technical Services and Operations (TSO) offers a robust, multi-site server backup solution available for Research servers called Tivoli Storage Manager (TSM).  TSM saves a configurable amount of active, inactive and deleted file versions, collocated to an alternate datacenter for disaster recovery capabilities. Additional options are available to snapshot an entire server into an archive, and the tapes containing that archive can be shipped off site to a secure vaulted site for multi-year data retention.
Cost:
Free
How to request the service?
Download and complete this form. (Internal SharePoint site,  Partners Username and password required)
Send the completed form to the address located at the top of the form
Call the Partners Service Desk at   and open a request with the TSM team. 

17. Resources Disaster Recovery Backup Resources
EISP-17a.2: Disaster Recovery Policy for Information Systems
EISS-17a.2: Disaster Recovery Standards
Contingency Plan Checklist
Recommend for smaller labs (<10-15)
Information System Contingency Plan Standard Operating Procedure (SOP)
Recommend for large labs ->15)
Backup Resources
For more information on purchasing or ordering the backup services visit:
PH-540 Data Backup and Storage