BUSINESS-CRITICAL BACKUP: PREPARING FOR DISASTER

Justin WinzenriedNetWize - Account Executivejwinzenried@netwize.net801-716-5354

Mike FullmerNetWize – Director of Salesmfullmer@netwize.net801-716-5344

Why Plan Disaster Recovery?

“A company that experiences a computer outage lasting more than 10 days will

never fully recover financially. 50% will be out of business within 5 years.”

"Disaster Recovery Planning: Managing Risk & Catastrophe in Information Systems" by Jon Toigo

• The #1 reason for implementing a disaster recovery solution is to keep from going out of business when disaster strikes.

The ULTIMATE Disaster!

ZOMBIES!!!

Natural DisasterEARTHQUAKE

ELECTRICAL STORMWILDFIRE

FLOOD

POWER OUTAGESTRIKE

Community Disruption

HAZARDOUS MATERIALS SPILL

Office Malfunctions

Man-made Disruptions

• Deleted Files

• Corrupted Data

• Compliance Whistleblowing

• Theft

Could your business survive if your file server was stolen?

DISGRUNTLED EMPLOYEES

Technology-Related DisruptionNETWORK DISRUPTION COMPUTER DOWNTIME

Technology-Related DisruptionCYBER TERRORISM

Disaster Causes

Definitions:• Business Continuity (BC) - The ability to continue your critical business functions during and immediately after a disaster

• Disaster Recovery (DR) - the long-term ability to rebuild your business capabilities after a disaster

Disaster Recovery Timeline - Offsite Backup is Only Part of the Story

Disaster

RPO

Recovery Point Objective

How old is your data backup? How much can you afford to lose?

RTO

Recovery Time Objective

How long will it take to restore your business? How long can you last before you don’t have customers?

High CostHigh Cost Lower CostLower Cost

Understanding Cost Considerations

48hr1hr48hr 24hr1hr24hr

True Cost of Ownership (TCO)• Identifying all the costs associated with DR and BC

• What is the cost of my DR service?

• What costs are incurred during an emergency?

• How much revenue will my company lose while systems are being restored?

• How often am I testing, and what is the cost associated with that?

Risk – Natural Disasters• Earthquake, fire, flood, hurricanes, tornadoes, etc.

• Is your data stored far enough offsite where it won’t be affected?

• How far of a reach will the natural disaster have that your trying to protect against?

• Will power and network be available to execute your DR plan?

Risk – Man-made disaster

“According to analyst firm IDC, about 70% of all successful attacks on computer networks were carried out by employees and insiders”

(http://iosafe.com/industry-stats)

Risk – Man-made disaster

To protect against internal threats, are you:

• Implementing permission controls?

• Implementing group policies?

• Do you have the ability to monitor and control employee’s access?

• Training users about acceptable computer use policies?

Risk – Man-made disaster

To protect against external threats ask yourself:

• What security is currently in place? • Passwords, encryption, firewalls, etc.

• What physical security do I have?• Door locks, key cards, laptop locks, bezel locks, etc.

• Do I have regular security reviews or audits?

Disaster Declaration• A specific event that starts your disaster recovery plan.

• This needs to be defined and written down. Although not all situations can be accounted for, basic guidelines and rules can clarify when a disaster should be declared, and when it should not

“Strategy without tactics is the slowest route to victory”

-Sun Tzu

Implementation

The NetWize Approach

How we approach disaster recovery:

1. Protect the File – First and foremost, is there a solid backup solution in place?

2. Protect the Server – Is there solid equipment installed with proper warranties? Do we need onsite failover, virtualization, and shared storage to mitigate hardware failure?

3. Protect the Company – Do we have offsite failover, offsite storage, and high availability implemented?

Review

Ask yourself the following about DR:

• Do I have a written plan in place to address emergency situations?

• Are my backups working? Do I really know how long it takes to restore from backup?

• Do I know all the costs associated with being down, and bringing my systems back up?

• Are there policies or regulations that require my business to have a disaster recovery plan?

Top Five List - Backup Gotcha’s

5. No test restores

4. Backup timing – when was your last backup

3. Only one copy of backup

2. No offsite backup

1. Do not backup local workstations

Disaster Recovery Timeline - Offsite Backup is Only Part of the Story

Disaster

RPO

Recovery Point Objective

How old is your data backup? How much can you afford to lose?

RTO

Recovery Time Objective

How long will it take to restore your business? How long can you last before you don’t have customers?

High CostHigh Cost Lower CostLower Cost

Understanding Cost Considerations

48hr1hr48hr 24hr1hr24hr

Traditional Backups - Tape

Backup to disk

Disk to Disk to Tape

Cloud Backup

Hybrid Cloud

Offsite Replication