Building a Business Case for Disaster Recovery Planning - State and Local Government Chris Turnley...
28
Building a Business Case for Disaster Recovery Planning - State and Local Government Chris Turnley [email protected]
Transcript of Building a Business Case for Disaster Recovery Planning - State and Local Government Chris Turnley...
Building a Business Case for Disaster Recovery Planning - State and Local Government
Chris Turnley
Agenda
• About Iron Mountain Off-Site Data Protection
• Where to Start: Building the Case
• Challenges, Components and Resources
• Case Study: Iron Mountain
• Summary
h
• Servicing > 28,000 customers
• Approaching 60 vaults in the United States
• 50+ million pieces of backup media
• 150+ actual disaster recovery events
• 10,000+ successful disaster recovery tests
• 7500+ successful media library relocations
Challenges of Data Protection
• Government Agencies have limited IT staffs/budgets
• Servers are getting backed up less frequently
• Recovery sites are unavailable
• DR initiatives often untested/not funded
*Source: Enterprise Storage Group
What’s a Disaster?
• Worst power outage in history
• Terrorist attack
• Employee sabotage
• Hurricanes
• Earthquakes
• Virus Attacks
Client Definition: Data loss and Business disruption
Service Impacts of an Outage
• People
• Employees
• Increased Support
• Other expenses
Recovery in the Balance
Balancing Cost and
Recoverability
RTO RPO $
Disaster Recoverability has a cost:
Additional Hardware
Additional Personnel
Fees for Services
Recovery Time Objective (RTO): How long can you be without the data?
Recovery Point Objective (RPO): How much data loss can you afford?
“Lessons Learned”
• Restricted “Air Space”
• Clients With a Tested Plan Responded Quicker, More Effectively
• Authorized Personnel in a Single Location
• Access to Media for Full Backup
• Knowledge of Other Vendors, Prepared and Available
• Location, location, location
Business Continuity Components
Mission Critical Data Property & Equipment
Data
People
Systems
Business Continuity
Business & IT Processes
The Process
• Recognize business continuity components
• Define what you are protecting
• Prioritize business/service functions
• Classify outage types, frequencies & duration
• Determine impact of an outage
• Calculate the cost of downtime
Impact Analysis
• Core Competencies
– It’s what you do
– It’s unique in the marketplace
– People depend on you for this
– It could be a product, service, process, or methodology
The Process
• Recognize business continuity components
• Define what you are protecting
• Prioritize business functions
• Classify outage types, frequencies & duration
• Determine impact of an outage
• Calculate the cost of downtime
DR Project Charter
• Project Organization
– Sponsor: EVP Operations
– Leader: Director Operations
– Project Team: • General Managers Operations
• Branch Managers Operations
• Manager IT Systems Development
• Manager IT Network Services
Business Continuity Components
Mission Critical Data Property & Equipment
Data
People
Systems
Service level agreementsSystems involvedDisaster scenariosEquipment infrastructureRecovery proceduresDisaster drill calendar
Business & IT Processes
• Recognize business continuity components
• Define what you are protecting
• Prioritize business functions
• Classify outage types, frequencies & duration
• Determine impact of an outage
• Calculate the cost of downtime
The Process
Critical Systems
CustomerFacingApps
CustomerFacingApps
EmailEmailVaultManagement
VaultManagement
• Recognize business continuity components
• Define what you are protecting
• Prioritize business functions
• Classify outage types, frequencies & duration
• Determine impact of an outage
• Calculate the cost of downtime
The Process
Prioritize Business Functions
critical vital sensitive Non-critical
Co
st o
f In
terr
up
tio
n
Business Tolerance to Interruption
Low
high
Low high
$$$$
$
• Recognize business continuity components
• Define what you are protecting
• Prioritize business functions
• Classify outage types, frequencies & duration
• Determine impact of an outage
• Calculate the cost of downtime
The Process
Branch Outages
0
2
4
6
8
10
12
14
16
Jun Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun
Router Network Hardware Power
Historical Outage Frequency
2001 2002
0
10
20
30
40
50
60
70
<1 1-2 3-4 5-9 10-14 15-23 24-30 31-39 >40
Time Down (hours)
# o
f B
ran
ch
es
Do
wn
Historical Outage Duration
Classifying Outages: Infrastructure
Branch
Data Center
Types of Outages:• Branch• Regional• National• Data Center
Types of Outages:• Branch• Regional• National• Data Center
• Recognize business continuity components
• Define what you are protecting
• Prioritize business functions
• Classify outage types, frequencies & duration
• Determine impact of an outage
• Calculate the cost of downtime
The Process
• What does it the cost for one day of outage?
– 727,729 transactions• Recording transactions once manually• Inputting these transactions after the outage
– Cost of recovery team• Troubleshoot, resolve problem, and manage
the recovery process
• Branch outage – Hundreds per hour
• Data Center outage – Tens of thousands per hour
Impact of an Outage
• Recognize business continuity components
• Define what you are protecting
• Prioritize business functions
• Classify outage types, frequencies & duration
• Determine impact of an outage
• Calculate the cost of downtime
The Process
• Recognize business continuity components
• Define what you are protecting
• Prioritize business functions
• Classify outage types, frequencies & duration
• Determine financial impact of an outage
• Calculate the cost of downtime
The Process
Building the Business Case
• Recognize business continuity components
• Define what you are protecting
• Prioritize business functions
• Classify outage types, frequencies & duration
• Determine financial impact of an outage
• Calculate the cost of downtime
Building a Business Case for Disaster Recovery Planning
