1. Business Continuity Technology Peter Lesser lesser@kkl.com (212) 692-5617 Peter Lesser lesser@kkl.com (212) 692-5617 Kraft Kennedy & Lesser, Inc. 360 Lexington Avenue New York, NY 10017 Kraft Kennedy & Lesser, Inc. 360 Lexington Avenue New York, NY 10017

2. K raft Kennedy Lesser & Inc. Agenda Kraft Kennedy & Lesser Business Continuity Planning Business Continuity Technology Q & A Kraft Kennedy & Lesser Business Continuity Planning Business Continuity Technology Q & A

3. K raft Kennedy Lesser & Inc. Kraft Kennedy & Lesser Founded in 1988 Dedicated to legal community Consulting Systems Integration Offices in New York, Houston and San Francisco 50+ Consultants Founded in 1988 Dedicated to legal community Consulting Systems Integration Offices in New York, Houston and San Francisco 50+ Consultants

4. K raft Kennedy Lesser & Inc. Kraft Kennedy & Lesser Representative Clients

5. BUSINESS CONTINUITY PLANNING

6. K raft Kennedy Lesser & Inc. Business Continuity Planning Facilities Human Resources Information Facilities Human Resources Information

7. K raft Kennedy Lesser & Inc. Facilities National Office Critical Firm Functions Space Local Offices Critical Office Functions Space National Office Critical Firm Functions Space Local Offices Critical Office Functions Space

8. K raft Kennedy Lesser & Inc. Human Resources National Office Emergency Management Team Manual Local Office Emergency Management Team Manual Local Office Emergency Preparedness Employee Manual National Office Emergency Management Team Manual Local Office Emergency Management Team Manual Local Office Emergency Preparedness Employee Manual

9. K raft Kennedy Lesser & Inc. Information Current storage locations Paper Desk-side files Office Records Centers Office safes Off-site storage vendors Electronic Messaging Document Manage Various Systems Protection mechanisms Off-Site Storage Image critical documents Technology Current storage locations Paper Desk-side files Office Records Centers Office safes Off-site storage vendors Electronic Messaging Document Manage Various Systems Protection mechanisms Off-Site Storage Image critical documents Technology

10. BUSINESS CONTINUITY TECHNOLOGY PLANNING

11. K raft Kennedy Lesser & Inc. Mission To create systems redundancies which aim to eliminate interruptions in service attributable to: Data center component failure Data center facility failure Communications link failure Building becomes temporarily or permanently inaccessible To create systems redundancies which aim to eliminate interruptions in service attributable to: Data center component failure Data center facility failure Communications link failure Building becomes temporarily or permanently inaccessible

12. K raft Kennedy Lesser & Inc. Assumptions The plan directs investments toward protecting firm applications deemed most critical. Critical applications are defined as those which pose the most risk to firm operations should they become unavailable for any period of time. They are: Messaging Document Management and Document Processing Time Entry Litigation Systems Contact Management Conflicts The remaining less critical applications will be restored as needed if an outage is determined to be long-term. The plan directs investments toward protecting firm applications deemed most critical. Critical applications are defined as those which pose the most risk to firm operations should they become unavailable for any period of time. They are: Messaging Document Management and Document Processing Time Entry Litigation Systems Contact Management Conflicts The remaining less critical applications will be restored as needed if an outage is determined to be long-term.

13. K raft Kennedy Lesser & Inc. Current Capabilities Standard law firm practices. The firms data centers are protected by: Fire control systems Temperature control systems Physical security systems Uninterruptible power supplies Hardware components are protected by: Duplicate power supplies Duplexed/RAID hard drives Redundant Internet access communications facilities Firm data is protected by tape backup procedures and data is regularly moved to off site storage. No real time ability to utilize that data in case of systems failure. Standard law firm practices. The firms data centers are protected by: Fire control systems Temperature control systems Physical security systems Uninterruptible power supplies Hardware components are protected by: Duplicate power supplies Duplexed/RAID hard drives Redundant Internet access communications facilities Firm data is protected by tape backup procedures and data is regularly moved to off site storage. No real time ability to utilize that data in case of systems failure.

14. K raft Kennedy Lesser & Inc. Strengths & Weaknesses of Current System Architecture Advantages: Systems are decentralized. Failure in one office does not affect the rest of the Firm. Systems are not dramatically affected by local communications failures. Disadvantages: Minimal system redundancy. Vulnerable to local system and power outages. Firm data is protected by tape backup only. No real time ability to utilize data in case of system failure. Maximum of days to weeks of downtime and 24 hours of data loss. Advantages: Systems are decentralized. Failure in one office does not affect the rest of the Firm. Systems are not dramatically affected by local communications failures. Disadvantages: Minimal system redundancy. Vulnerable to local system and power outages. Firm data is protected by tape backup only. No real time ability to utilize data in case of system failure. Maximum of days to weeks of downtime and 24 hours of data loss.

15. K raft Kennedy Lesser & Inc. Availability & Disaster Recovery Goals High Availability Requirement ApplicationDisaster Recovery Requirement Data Loss………..… Recovery time…….. Disconnects……..… 000000 Critical Data Loss…….….. Recovery Time….. 1/2 hour 2 hours Data Loss………..… Recovery Time……. 0000 Very Important Data Loss…….….. Recovery Time….. 2 hours 4 hours Data Loss………..... RecoveryTime…….. 0 24 hrs Important Data Loss…..……. Recovery Time.…. 24 hours 72 hours

16. K raft Kennedy Lesser & Inc. Management Goals Cost Containment Reduce Systems Management Effort Improve Consistency Reduce Infrastructure Upgrade Effort Reduce Time to Support New Applications Reduce Time to Establish and Support New Locations Cost Containment Reduce Systems Management Effort Improve Consistency Reduce Infrastructure Upgrade Effort Reduce Time to Support New Applications Reduce Time to Establish and Support New Locations

17. K raft Kennedy Lesser & Inc. Options for increased capabilities Implement local high availability technologies. Establish current data centers as hot- sites for each other. Establish disaster recovery hot-site. Relocate technology infrastructure to redundant off-site data centers. Implement local high availability technologies. Establish current data centers as hot- sites for each other. Establish disaster recovery hot-site. Relocate technology infrastructure to redundant off-site data centers.

18. K raft Kennedy Lesser & Inc. Advanced High Availability Technologies Environmental Protection Hardware Component Redundancy Clustering Storage Thin Client Virtualization Consolidation Centralization Caching Replication Backup Environmental Protection Hardware Component Redundancy Clustering Storage Thin Client Virtualization Consolidation Centralization Caching Replication Backup

19. K raft Kennedy Lesser & Inc. Internal Hot-Sites Advantages: Allows for rapid recovery. Leverages existing firm locations. Reduces space required for some data centers. Reduces efforts for some systems upgrades. Disadvantages: Need to acquire significant additional space in primary locations. Existing locations do not have ideal facilities. Does not fully leverage economies of consolidation. Requires distributed high level IT staff. Solution is most disruptive to implement. Solution is most time consuming to complete. Must invest in redundant communications links from small offices to consolidated data centers. Advantages: Allows for rapid recovery. Leverages existing firm locations. Reduces space required for some data centers. Reduces efforts for some systems upgrades. Disadvantages: Need to acquire significant additional space in primary locations. Existing locations do not have ideal facilities. Does not fully leverage economies of consolidation. Requires distributed high level IT staff. Solution is most disruptive to implement. Solution is most time consuming to complete. Must invest in redundant communications links from small offices to consolidated data centers.

20. K raft Kennedy Lesser & Inc. Disaster Recovery Hot-Site Advantages: Protects multiple offices from disaster in any single location. Hot-site is easily scaled to backup addition applications or locations. No reliance on communications for normal operations. Disadvantages: Does not provide full systems recovery. Does not protect from component failure. Does not leverage economies of consolidation. Requires large distributed IT staff. Solution is disruptive to implement. Advantages: Protects multiple offices from disaster in any single location. Hot-site is easily scaled to backup addition applications or locations. No reliance on communications for normal operations. Disadvantages: Does not provide full systems recovery. Does not protect from component failure. Does not leverage economies of consolidation. Requires large distributed IT staff. Solution is disruptive to implement.

21. K raft Kennedy Lesser & Inc. Redundant Off-Site Data Centers Advantages: Allows for rapid recovery. Reduces space required for in office data centers. Allows data centers to be located in less expensive locations. Allows data centers to be located in buildings with enhanced facilities. Increases in DR protection are realized during implementation process. Allows for IT staff consolidation. Allows for simplification of systems design. Dramatically reduces efforts for systems upgrades. Dramatically reduces time to support new locations. Requires smallest amount of hardware and software. Solution is least disruptive to implement. Disadvantages: Must invest in redundant communications links from all offices to data center locations. Advantages: Allows for rapid recovery. Reduces space required for in office data centers. Allows data centers to be located in less expensive locations. Allows data centers to be located in buildings with enhanced facilities. Increases in DR protection are realized during implementation process. Allows for IT staff consolidation. Allows for simplification of systems design. Dramatically reduces efforts for systems upgrades. Dramatically reduces time to support new locations. Requires smallest amount of hardware and software. Solution is least disruptive to implement. Disadvantages: Must invest in redundant communications links from all offices to data center locations.

22. K raft Kennedy Lesser & Inc. Recommendations

23. BUSINESS CONTINUITY TECHNOLOGY

24. K raft Kennedy Lesser & Inc. Environmental Protection HVAC Fire Suppression Water Detection Uninterruptible Power Supply Generator Access Security HVAC Fire Suppression Water Detection Uninterruptible Power Supply Generator Access Security

25. K raft Kennedy Lesser & Inc. Hardware Component Redundancy Power Supplies Fans Memory (Parity/Chipkill) NICs HBAs Disk Drives LAN Switches Backbone Cable Riser Shafts Power Supplies Fans Memory (Parity/Chipkill) NICs HBAs Disk Drives LAN Switches Backbone Cable Riser Shafts

26. K raft Kennedy Lesser & Inc. Clustering Fault Tolerant Hardware Operating System Clustering Application Clustering Fault Tolerant Hardware Operating System Clustering Application Clustering

27. K raft Kennedy Lesser & Inc. Storage Tape Local Storage NAS SANs SCSI FC iSCSI Boot from SAN Tape Local Storage NAS SANs SCSI FC iSCSI Boot from SAN

28. K raft Kennedy Lesser & Inc. Thin Client Windows Terminal Server Citrix Browser Windows Terminal Server Citrix Browser

29. K raft Kennedy Lesser & Inc. Virtualization VMware Microsoft HW Partitioning OS Partitioning VMware Microsoft HW Partitioning OS Partitioning

30. K raft Kennedy Lesser & Inc. Consolidation Blade Servers Clusters Virtual Servers Server Consolidation Minimize Support Efforts Improved Realization of Availability Costs Blade Servers Clusters Virtual Servers Server Consolidation Minimize Support Efforts Improved Realization of Availability Costs

31. K raft Kennedy Lesser & Inc. Centralization Reduced Number of Servers Reduced Storage Overlap Centralized Support Simplified Replication Reduced Number of Servers Reduced Storage Overlap Centralized Support Simplified Replication

32. K raft Kennedy Lesser & Inc. Caching Messaging Document Management Supports Users Remote from Systems Supports Centralization Supports Consolidation Messaging Document Management Supports Users Remote from Systems Supports Centralization Supports Consolidation

33. K raft Kennedy Lesser & Inc. Replication Data Redundancy Minimal Value without Systems Minimal Value without Access Operating Systems SAN to SAN Dedicated Communications vs. IP Bandwidth Required Data Redundancy Minimal Value without Systems Minimal Value without Access Operating Systems SAN to SAN Dedicated Communications vs. IP Bandwidth Required

34. K raft Kennedy Lesser & Inc. Backup Disk to Disk/Virtual Tape Three Tier Tape Libraries On-Line Backup at Secondary Site Disk to Disk/Virtual Tape Three Tier Tape Libraries On-Line Backup at Secondary Site

35. K raft Kennedy Lesser & Inc. Wide Area Network Technology Traditional IP Fiber Performance Bandwidth Latency Diversity WAN carrier Local Exchange carrier Point of entry (as possible) Inside wiring Managed Service Technology Traditional IP Fiber Performance Bandwidth Latency Diversity WAN carrier Local Exchange carrier Point of entry (as possible) Inside wiring Managed Service

36. Questions & Answers