The Surprising Truth About Your DR Maturity Level

Transcription

1 The Surprising Truth About Your DR Maturity Level Todd Scallan VP, Product & Engineering Daniel Kuperman Sr. Manager Product Marketing

2 Agenda 1 Context: Why do we need DR maturity? 2 What is the DR maturity framework? 3 Example of DR maturity in action 4 How to calculate your company s resiliency score 5 Wrap up and Q&A

3 Increased reliance on IT leaves companies at risk 72% of applications are considered mission critical or business critical The increased reliance on technology is considered by most companies as the top factor in increasing business risk Source: Business continuity drives the CIO agenda, Forrester Research, October 2013

4 A recent example is Superstorm Sandy New York Stock Exchange closed for two days 25% of all mobile phone sites across 10 states were down Cable operators reported 25% broadband outages Walgreens the drugstore giant was forced to close 1,400 stores Image credit: RT.com

5 But in fact, you shouldn t worry about the next one Disasters are NOT the most common cause of application downtime SW / HW failure + network failure 50% Human error 43.50% Power failure 24% Weather 14% Disaster Recovery Preparedness Benchmark Survey, 2014 Annual Report

6 Maybe that is why companies fail to prepare Nearly 3 out of 4 companies worldwide are failing in terms of disaster readiness Disaster Recovery Preparedness Benchmark Survey, % 1 in 5 $$$ 36% of organizations lost one or more critical applications, VMs, or critical data files for hours at a time 1 in 5 companies lost one or more critical applications over a period of days Losses from outages ranged from a few thousand dollars to millions of dollars

7 Especially when it comes to in-house initiatives What are the top challenges that you are facing with your in-house disaster recovery infrastructure and processes? 1 Lack of focus on DR relative to other IT projects 2 Not enough DR testing 3 Lack of funding to keep DR infrastructure up to date 4 Lack of DR skills in-house 5 Not confident in ability to respond to a real disaster Source: Forrester Research

8 This is why we created the framework Assess resiliency, not only for disaster scenarios, but also for the most common causes of IT interruption Involve other departments to discuss key issues related to business continuity Create a common language among different stakeholders Get agreement around the company s goals and required IT improvements Change the focus from backup and recovery to company resiliency

9

10 Recovery Likelihood Disaster Recovery Maturity Framework Ad Hoc Minimal or no backups No recovery plan Highest risk to business Reactive Elements of protection Disparate products Loose recovery plan Prepared Clear recovery procedures RPO & RTO understood Prone to surprises Proactive Documented recovery plan Proactive validation Good likelihood of recovery Resilient Recovery assured Integrated recovery plan Best likelihood of recovery Level 1 Level 2 Level 3 Level 4 Level 5 Recovery Readiness

11 Recovery Effort Level 1: Ad-Hoc Characteristics: No formal plan, or approved initiative to proactive prepare the company to avoid downtime 1 Decentralized backup, left up to individuals or departments with little IT oversight Recovery operations are not documented, rehearsed, or communicated Disaster recovery and business continuity seen as not critical for the business Time to Recover Mentality of we don t have time for this pervasive throughout organization No senior management support

12 Recovery Effort Level 2: Reactive Characteristics: Some elements of protection exist (local backups or remote copying of data) 2 1 Multiple products, no overall strategy for DR Reactive recovery without documented steps Time to Recover

13 Recovery Effort Level 3: Prepared Characteristics: Documented a plan with clear recovery procedures 2 1 Plan is aligned with business needs in terms of recovery point and recovery time objectives (RPO and RTO) Significant effort may still be required when executing recovery operations 3 Time to Recover

14 Recovery Effort Level 4: Proactive Characteristics: A recovery plan exists Proactive validation of the plan is performed by testing local recovery procedures and performing periodic disaster drills Time to Recover

15 Recovery Effort Level 5: Resilient Characteristics: The disaster recovery plan is fully integrated with business continuity plans that are also in place 2 1 Full organizational support towards DR activities and initiatives 4 3 Senior managers periodically attend plan exercises as observers Onsite protection for data, applications, IT infrastructure is available as well as off-site capability to recover the entire IT infrastructure is in place 5 Time to Recover IT systems and business processes can be returned to normal production well within RTO

16 Additional Considerations for Maturity Levels The following elements will help determine your DR maturity level Impact of application downtime RTO Protection architecture Protection scope Documentation Testing scope Testing frequency Organizational sponsorship

17 Case Study

18 Axcient: One Recovery-as-a-Service Platform Backup isn t just about backup anymore, it s about improved resiliency Forrester Research vs. Vs.

19 One Snapshot, Multiple Recovery Options Local and cloud-based recovery

20 Recovery Likelihood Example: Law Firm Florida-based law firm with 40 attorneys, 100+ employees IT ENVIRONMENT 10 Servers + VMs Exchange Server Symantec Backup Exec to Tape CRITICAL EVENT Hurricane knocked down power for a week Ad Hoc Reactive Prepared Proactive Resilient No one could work during that time. Every hour down is thousands of dollars lost, so we had to make a change. IT Manager Level 1 Level 2 Level 3 Level 4 Level 5 Recovery Readiness

21 Recovery Likelihood Example: Law Firm Florida-based law firm with 40 attorneys, 100+ employees IT ENVIRONMENT 10 Servers + VMs Exchange Server Server replication CRITICAL EVENT Power outage for ½ day Ad Hoc Reactive Prepared Proactive Resilient Level 1 Level 2 Level 3 Level 4 Level 5 Recovery Readiness

22 Recovery Likelihood Example: Law Firm Florida-based law firm with 40 attorneys, 100+ employees IT ENVIRONMENT 10 Servers + VMs Exchange Server Axcient Recovery-as-a-Service CRITICAL EVENT Upgrade of servers during production time Ad Hoc Reactive Prepared Proactive Resilient Level 1 Level 2 Level 3 Level 4 Level 5 Recovery Readiness

23 How to Calculate Your Readiness Score

24 Source: Aberdeen Group 1: Determine the Impact of Downtime How will your company be affected by an interruption in operations? Minor Impact Critical Impact Average cost of downtime: $167K per hour $686,250 $8,581 $215,638 Small Business Medium Business Large Business

25 2: What is your RTO? How quickly does your company need to get back fully operational to minimize the impact? Days Minutes / Seconds Non-Profit Publishing Financial Services Healthcare

26 Speed of Recovery 3: Product architecture What is the technology architecture of your current disaster recovery solution? CLOUD DISK SERVER REPLICATION TAPE CD Comprehensiveness of Protection

27 4: Protection scope What part of your IT infrastructure is currently protected by your DR technology and plans? Files Databases & Applications Physical Servers Virtual Environments Entire IT Infrastructure

28 Standards and Best Practices 5: Documentation How well documented are your Disaster Recovery and Business Continuity goals and procedures? Plan components Company DR policies DR plan documents Business impact analysis reports Risk assessment reports Exercise results IT DR procedures Supporting documents TIP: Watch Best Practices in Disaster Recovery Planning and Testing Axcient.com/resources

29 6: Testing scope and frequency How often do you test your DR Plan and what is tested? Source: Disaster Recovery Preparedness Benchmark Survey, 2014 TIP: Watch Best Practices in Disaster Recovery Planning and Testing Axcient.com/resources

30 7: Organizational sponsorship Is the Disaster Recovery and Business Continuity initiative supported by the whole organization? IT Individual IT Leadership Senior Management Company Wide

31 Readiness Score Calculator

32 What s next 1. Calculate your score Send an to maturity-score@axcient.com to schedule a consultation and calculate your own readiness score 2. Calculate your cost of IT interruption / downtime Go to axcient.com/downtime and use our online calculator

33 Download the whitepaper axcient.com/resources

34 For more information, visit axcient.com or call to calculate your company s DR maturity linkedin.com/company/axcient axcient.com/facebook