1. Disaster Prevention and Recovery Presented By: Sean Snodgrass and Theodore Smith

2. Learning Objectives  Define Disaster Prevention and Recovery and Business Continuity Planning  Identify their uses  Learn the importance of DRP, important considerations, and statistics  Recognize different levels and solutions  Advantages and disadvantages  Activity

3. Definition  Disaster Prevention (DP): The process of minimizing the risk of a disaster occurring. Pre-disaster steps taken.  Disaster Recovery (DR): The process of minimizing business operation downtime in the event of a disaster. Post-disaster steps taken.

4. Definition Business Continuity Planning: A practiced logical plan for how a company will recover and restore data in a specified period of time after a disaster.

5. Types of Disasters  Serious information security incidents  Equipment or system failure  Loss of utilities and services  Organized and/or deliberate disruption  Environmental disasters

6. Uses  Personal (Mozy Online Backup)  Business (offsite data centers)  Law Firms (Sarbanes-Oxley Act)  Government  Universities (here at OSU)

7. Why is DRP important?  Integral to business longevity  Useful tool  Mandated by law  Employee training

8. Statistics   Veritas Software, a subsidiary of Symantec, conducted a survey of more than 1,200 global managers in 2004   What would be the most devastating effects of a disaster for a company? Source: http://www.processor.com/articles//P2641/04p41/04p41graphic.pdf?guid=BF210C8BB27D4313982642EC80117A44

9. Statistics   Only 38% of companies had DR or BC   Nearly 20% said company would be at stake   51% of respondents with DR had used their recovery plan within the past year.   Computer failure, hackers, viruses accounted for 63% of used plans

10. Statistics   More than 40% would have no idea how to resume business if primary data center lost.   On average, 72 hours to recover basic business functions after a fire.   $78,000 lost per hour on average (Disaster Recovery Journal estimate) Source: http://www.processor.com/articles//P2641/04p41/04p41graphic.pdf?guid=BF210C8BB27D4313982642EC80117A44

11. Gartner Survey, Oct. 2005 Picture Source: Witty, Roberta J. Disaster Recovery Journal, Fall 2005. Volume 19, Issue 4

12. Statistics  How often do you think most companies test their recovery systems?  Annually  Semi-annually  Quarterly  Never

13. Picture Source: Witty, Roberta J. Disaster Recovery Journal, Fall 2005. Volume 19, Issue 4

15. Considerations   Costs   Threats and BIA   Mission critical business functions   Recovery Time Objective (RTO)   Recovery Point Objective (RPO)   Systems   People Source: http://www.stanford.edu/dept/EHS/prod/general/erprep/BCP_guide.doc

16. DRP Solutions   Data storage/duplication methods   Tape backup   Electronic vaulting   Periodic data backup   Mirroring Picture Source: www.netgainit.com/Page.aspx?pageID=21www.netgainit.com/Page.aspx?pageID=21

17. DRP Solutions   Software   Facilitates data and systems recovery   Automated or user commanded synchronization.   Also used in BCP

18. DRP Solutions   Cold site   Offsite storage facility with basic infrastructure   No data recovery   Long recovery time   Low cost Source: Processor Editorial Article “Hot, Warm, or Cold,” September 2004. Vol. 17 Issue 35: http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp Picture Source:pulickal.files.wordpress.com/.../emptyrm-b.jpg

19. DRP Solutions   Hot site   Offsite facility, fully mirrored data center   Minimal data loss   Nearly instantaneous recovery   High cost Source: Processor Editorial Article “Hot, Warm, or Cold,” September 2004. Vol. 17 Issue 35: http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp

20. Picture source: http://www.another9.com/uploads/hotsite.gif

21. DRP Solutions   Warm site   In between hot and cold sites   Partially functional data center   Periodic data replication   Lower cost relative to hot sites Source: Processor Editorial Article “Hot, Warm, or Cold,” September 2004. Vol. 17 Issue 35: http://www.processor.com/editorial/article.asp?article=articles%2Fp2735%2F23p35%2F23p35.asp

22. DRP Solutions   Mobile On-site   Mobile data center   Flexible   Limited space   Suitable for smaller recoveries   Keeps employees close to home Picture source: http://www.rentsysrecovery.com/?PID=4

23. DRP Solutions   Quick-ship   Solution implied in name   Third-party vendor   Temporarily leased equipment

24. Advantages and Disadvantages Disadvantages:  Very costly (hospitals pay between 100-500 grand per year)  Needs constant maintenance  Will not be successful if everyone is not involved  Like insurance Advantages:  Saves huge amounts of money if a disaster occurs  Can be used to help other business functions

25. Conclusion  DR is highly tailored to individual company’s needs  DR implementation is on the rise, trending towards warm sites  When fully utilized can save companies money  Useful for anyone in the business world to be aware of