2. Founded in 1999 as StorageCraft, Inc. Headquarters in Draper, Utah, USA ShadowProtect product family Disk-based backup, disaster recovery, data protection – P2P System migration & consolidation – P2V, V2P and V2V Millions of installations worldwide on servers, desktops and laptops Licensed to software and hardware manufacturers StorageCraft Technology Corporation Company Overview ® ®

3. What is a Disaster? Business Continuity and Disaster Recovery Anything that disrupts business continuity Common Disasters Uncommon (Extreme disasters)

4. Common Disasters Most common disasters can be overcome with a local or near-line backup and DR plan Equipment Failure Operator Error Service Pack updates Viruses

5. Uncommon Disasters Require both a near-line and offsite backup and DR plan Theft Fire Flood Earthquake Tornado Terrorist Attack Examples: Katrina, Southern California Wildfires, Earthquakes

6. Disaster Recovery and Data Protection Planning Keys to Maximize Business Continuity Business continuity is critical for any business to be successful. Your disaster recovery and data protection plan must have a high level of reliability. Downtime will occur – hardware & software failure, operator error. Backup is important, but disaster recovery is key to maximize business continuity. Flexible disaster recovery options lead to restoring business continuity faster. Reactive and proactive methods. What is the price of downtime in your business? How fast can business continuity be restored to avoid lost business opportunities? RPO - 1hour, 4 hours, 1 day?

7. Types of Disaster Recovery Planning Alternatives for Protecting Systems, Applications and Data File and Folder Backup / Protection Image / System-Based Backup Virtualization

8. File and Folder Backup and DR One Alternative for Protecting Systems, Applications and Data Advantages Administrator can select the specific files and folders to protect. Multiple versions of files may be retained. Files and folders can be quickly recovered if the system is accessible. Both near-line and offsite options are available. Disadvantages The system must be rebuilt in the event of a system failure. Depending on the media, this can be a very tedious process. Example: Tape – this is an excellent compliance and archiving media, but can be an extremely slow recovery option.

9. Image Based Backup and DR One Alternative for Protecting Systems, Applications and Data Advantages The entire volume can be backed up, including OS, settings, applications and data. Recovery can occur based on an exact point in time – before business continuity was disrupted. Files and folders can be recovered in the event of a common disaster. Disk media is typically used, which is faster and more reliable than tape. Recovery options are available to same system, dissimilar hardware or virtual environments. Disadvantages The initial backup (base) can be large, making it more difficult to transport off-site. Incremental backups can be very fast, but differential images may be more time consuming and resource intensive.

10. Virtualization Alternative for Protecting Systems, Applications and Data Advantages Fastest method for recovery - Restore systems even if the same hardware is not available. You can upgrade your older hardware environment to newer systems without having to completely re-install the OS and applications. Servers can be hardware independent, multiple VMs can be run from any system - you dont have to maintain duplicate hardware for use in case of an emergency. Consolidation, migration and redundancy can simplify disaster recovery. Fix the real system while running in a virtual environment, then restore back to the physical system once its ready. IT administrators dont always have spare hardware. Most of the time small business must piece hardware together. Disadvantages Hardware requirements. Emerging technology requires new knowledge and training for staff.

11. Disaster Recovery is Key Keys to Offering a Profitable Service SAN / NAS / RAIDUSB / Firewire Flash Memory CD/DVD/Blu- rayi/SCSI, SATA, ATA Same Hardware Dissimilar Hardware Windows Operating System Applications – Exchange, SQL Updates, Settings Critical Data Virtual Environments Hyper-V

12. No DR and Data Protection service is complete if it hasnt been tested! Fire Drill Example. Things can go wrong – make sure you know what they are. Have you tested your current DR process? Your strategy needs to incorporate options for portability so that you can test on non-production systems. Verification! Your DR and data protection plan must address verification so that you know that your backups are reliable. Disaster Recovery and Data Protection Planning Keys to Maximize Business Continuity

13. Incorporate both near-line and off-site backup Addresses both common and extreme disasters. Provides a level of redundancy that ensures data is protected. Example: Best Practices for DR and Data Protection Planning Keys to Maximize Business Continuity

14. Best Practices for Backup and Disaster Recovery Flexibility is Mandatory Objective #1 is the fastest DR possible in order to ensure business continuity. Recovery must be possible in both common and extreme disasters. Full system recovery (operating system, applications, settings and data) is a must. Critical data (file and folder) recovery is convenient in the event of common disasters. You must be able to recover to the available hardware resources that you have on hand.

15. Using Disaster Recovery for More than Disaster Recovery

16. Whats Really Important?

17. Its all about data

18. According to a study published by Storage Strategies NOW, the amount of data growth SMBs experience doubles every 18 months. Source: Connor, Deni, Corrigan, Patrick H., and Bagley, James E. Data Protection and Recovery in the Small and Mid-sized Businesses (SMB). Storage Strategies NOW, Inc. 2010.

19. What is the importance of having a DR plan? It protects companies most valuable assets, their data. It helps companies understand their data, applications, and processes.

20. Why dont companies believe they need a DR plan? Statistics are not motivating – It will never happen to me Biological Imperative – We are wired to ignore doom and gloom statistics.

21. Is There More to It Than That? Type of DisasterSmallMid-SizedLarge Application Failure20%33%85% Employee Created29%24%38% Accidental Data Deletion31%28%38% Natural Disaster5%9%23% Virus/Malware25%20%23% Power Outage48%46%23% The Aberdeen Group asked 173 businesses, What caused data loss in the past 12 months? Source: Small vs. Large Enterprise Data Backup; Same Concept, Very Different Process. Aberdeen Group, June 2011. 4. Business Size

22. Is Disaster Recovery… Reactive or Active?

23. Is Reactive Bad? SmallMid-SizedLarge Daily10%17%46% Weekly17%30%23% Monthly15%13%8% Semi-monthly5%17%8% Quarterly12%0%8% Rarely37%17%8% The Aberdeen Group asked the same 173 businesses, About how often do you need to recover data? Source: Small vs. Large Enterprise Data Backup; Same Concept, Very Different Process. Aberdeen Group, June 2011. 3.

24. Can Disaster Recovery Be Active? Does it still protect against disaster? But does it also have value when things are running smoothly?

25. So what can I do and why should I do it?

26. Self-Analysis is a Good Thing Ask Yourself: What does one hour of downtime cost your company? How much data can your afford to lose? How long can a critical server be down? Where is your data stored? Locally? Offsite? A DR plan allows you to consolidate servers, prioritize and organize data and applications, and streamline your processes.

27. How does a DR plan make you more efficient? Recovery and backup time is reduced More applications and data can be protected Saves the company money Ensures that non-mission critical systems dont become single points of failure for mission critical systems

28. How can it save your company money? Efficiency saves money DR implementation can reduce costs by more than 35%.

29. Source: You Need Professional Help: A Case for Third-Party Consultants. Aberdeen Group, July 2011. 3.

30. DR helps by: Allowing businesses to comply with government regulations Enabling forensic recovery of critical information The recovery of digital evidence for use in criminal or civil courts

31. Reasons why companies need a DR plan: Sarbanes-Oxley (SOX) – Public companies must maintain backups of their data Regulations – Health Insurance Portability and Accountability Act (HIPAA) – data must be consistently available, even in a disaster Banking Regulations – Banks must meet or exceed guidelines established by the FDIC.

32. Rekindle Your Relationship (with Your Data) Ask yourself the following questions: How do I access old data? How do I test new applications? How can I be sure the solutions I try wont cause more problems?

33. IDC research found that IT staff time associated with backup and recovery procedures could be reduced by 85% to 90% when automation and new technologies were applied in midsize firms. Source: Randy Perry, Jean S. Bozman, and Raymond Boggs. Business Risk and the Midsize Firm: What Can Be Done to Minimize Disruptions? IDC, June 2010. 2.

34. Summary of Backup and Disaster Recovery planning and implementation Proactive, healthy, positive action to protect your business assets Ensures that your business is running efficiently Keeps business running and able to generate revenue Gives you the confidence in the fact that you can survive in the event of a disaster!