Business Continuity Planning ebook

Transcription

1 Business Continuity Planning ebook

2 Table of Contents Increase Profits With Disaster Recovery...3 Global Overview of Disaster Recovery...5 Business Demand for Stringent Security...7 Selecting Individual Disaster Relief Solutions...9 IT Implications for Disaster Recovery Solutions...13 IT Challenges for Organizations of All Sizes...15 Technology Solutions to Overcome Challenges...16 File and Application Enhancement Technology...21 Disaster Recovery Solutions from QeH Final Analysis...25

3 Increase Profits With Disaster Recovery Finding the right partner for your disaster recovery needs can seem like an insurmountable challenge. Any disruption to service or potential IT threat can be extremely damaging to both your business and your brand. That is why preparation is crucial. The right IT Infrastructure strategy provides everything from creating a custom network, securing your data, and facility management. By partnering with the right service provider, your business develops a comprehensive plan which includes backup and support capabilities across all the many dimensions of your enterprise IT environment. The ideal service provider for your Disaster Recovery requirements will have comprehensive IT solutions which include every aspect of professional and managed services all delivered through a dedicated IP transit network. With the right IT solutions partner, you are able to develop the capabilities and access the skills required for a highly reliable network with an integral protection strategy that works.

4 Increase Profits With Disaster Recovery Here are several specific ways having the right partner for your IT safety benefits your business, reduces risks, and can increase profits: Custom plans which provide only the data protection your business requires Options for routing and network connectivity Enterprise-ready data center facilities which ensure business application continuity and consistent data availability. Cyber security solutions created for your individual Disaster Recovery needs Superior performance backed up with solid service level agreements (SLAs) By providing expansive access to network security threat data, your dental, medical, or insurance practice, you get a unique view into new threats in a way that protects your business from cyber-attacks. By providing dynamic enterprise computing resources such as disks, processors, and disks which can be custom scaled to meet your individual business requirements. With the right custom engineered connectivity services, you get a range of options to keep your business applications and IT infrastructure running to ensure survivability, compliance, and top performance.

5 Global Overview of Disaster Recovery For IT professionals, doing more with less is the current mantra. Mainly due to flat budgets, but also added to the increase in pressures on IT demands for businesses of all sizes is stringent service level agreements, high downtime costs, and the potential for system outages to severely challenge data and disaster recovery plans. With this recipe for disaster, it is no wonder that IT professionals are finding innovative new ways to respond to the increase in demand. In a Symantec study, the results found that testing data and disaster recovery systems increasingly impacts both revenue and customers negatively. The study found that one in four data and disaster recovery tests fails.

6 Global Overview of Disaster Recovery By incorporating virtualization into disaster recovery plans, organizations can respond in ways that reduce the negative impact of data and disaster recovery efforts. Key findings of the Symantec 2009 Disaster Recovery Research Report include: Disaster Recovery budgets continue to flatten calling for businesses of all sizes to do more with less Cost of downtime to profit margins and revenue is significant Virtualization changes how organizations approach data and disaster recovery Disaster Recovery testing increasingly impacts customers and revenue According to the study, in 2009, all organizations (93%) had to fully or partially implement Disaster Recovery plans. Many reported that they could get back up and running in about four hours after a site-wide outage. Median time to achieve skeleton operations was three hours. Based on the recovery time reported by respondents and the per hour cost of downtime, it can be clearly deduced that the cost per incident globally averages approximately $287,000, with the median cost per incident rising as high as $500,000 globally. With this critical problem of downtime, the imperative for IT to have proper Disaster Recovery systems established and in place is crucial. From 2008 to 2009, the participants in the Symantec study increased 4% with not slowdown in sight. Meaning that the costs and urgency of having appropriate Data and Disaster Recovery systems is incrementally rising.

7 Business Demand For Stringent Security With the ever-increasing advances in technology and development, many business owners large and small get lost in the shuffle to stay up-to-date and secure with their IT resources. While every business has security risks that can lead to breaches and loss, there are a number of different reasons why businesses security gets compromised. The good news is that they are all preventable. Several of the top security breaches businesses face are: Obsolete Software Many business owners and employees do attempt to keep the company software updated, but are thwarted by intense security protocols which do not allow updates to occur easily. Many companies neglect simple software updates. Over time, this can lead to a massive security hole. Daily checks are essential for keeping software up to date and security levels high. Unsafe Attachments This is a persistent threat to data security and systems maintenance. The threat level can be stopped with effective anti-virus and anti-malware software, but it requires vigilance. Never allow employees to open and run any executable files sent from external sources.

8 Business Demand For Stringent Security Company Data Taken Off-site The very worst security breaches for small or large businesses can occur at the hands of trusted employees. While it is common practice to allow people to take work home with them, this can be a severe compromise to the data itself. Any data taken off-site is a potential disaster waiting to occur. Data Storage Device Loss Even with the most trustworthy, security-conscious employees who occasionally take data home with them, there is no protection against crime or accidental loss. Cars or homes can be broken into and laptops taken, many USB thumb drives have fallen out of the employee s pockets or laptop bags and met their demise. Even if damaged or dented, devices can often yield sensitive business information. Company data is best left on company grounds in a secure IT environment. IT Equipment Security Whether it is a separate locked, server room or an offsite secure system, finding the right physical security for company data is a preventative measure for disaster recovery. Network security on and offline is the right way to keep sensitive business information secure. Information Disposal While paper-shredding is effective, there are also specific steps to be taken when disposing of company data online. The right IT partnership means that your system is secure, fully protected, and when it is time to dispose of sensitive information it is done correctly and safely. By starting with these initial steps in protecting your business data and IT system to prevent a disaster recovery situation from ever occurring, your company is sure to thrive and be able to focus on the services it provides and growing its bottom line.

9 Selecting Individual Disaster Relief Solutions The process, procedures, and policies which are related to preparing for recovery or continuation of IT infrastructure that is vital to an organization after a natural or human-caused disaster is called Disaster Recovery. Preparing for the worst and planning in advance can mean the difference between salvaging valuable company data and having to re-build from square one. Disaster Recovery focuses on keeping the IT systems that support your business running smoothly and protected no matter what the circumstances. That is why selecting the individual Disaster Recovery Solutions which are right for your business is an important part of any business plan and business success. The importance of disaster recovery planning is now a cornerstone of running a successful business enterprise.

10 Selecting Individual Disaster Relief Solutions The importance of ensuring continuous operation of IT systems and their rapid recover (in the event of any type of emergency natural or manmade) is a critical component. Recent statistics from McKinsey & Company show that of companies who have had a major loss of business data, 43% never re-open and a further 29% close within 2 years of the occurrence. Protecting your business means preparing for the continuation or recovery of IT systems needs to be taken very seriously. With the right investment into planning for disaster recovery, losses will be minimal and the business will be up an running rapidly in the event of any type of disruptive event. Any disaster recovery plan (DRP) requires unique specific measures and procedures to eliminate threat. Control measures are the steps or internal and external mechanisms in place which can reduce and/or eliminate various threats for organizations. Whether it is the resumption of applications, hardware, data, electronic communications (such as networking) or other IT infrastructure, there are three types of disaster recovery control measures: Detective Measures These are specific controls aimed at discovering or detecting any unwanted events. Preventive Measures Controls which are aimed at preventing a disruptive event from occurring. Corrective Measures Specific controls for correcting or restoring the IT system and infrastructure after a disaster or disruptive event.

11 Selecting Individual Disaster Relief Solutions The right disaster recovery plan requires that all three of these types of controls be implemented, documented, and tested regularly using information about the recovery point objectives (RPO) and the recovery time objectives (RTO) for any of the processes (such as running payroll, generating an order, tracking supplies and shipments) integral to a business. The metrics for individual business processes are mapped to the underlying IT systems and infrastructure which supports the processes. If there are any incomplete RPOs or RTOs, a disaster recovery plan can be quickly derailed. Every item in the Disaster Recovery plan requires a welldefined recovery point and time objective. Failure to create the right RPOs or RTOs with the accompanying metrics means that there will be significant difficulties which can extend the disrupter or disaster s impact. By performing a cost-benefit analysis, businesses can find the right protection which leads to zero data loss and zero time loss. With the right disaster recovery partner, stand-by sites and systems can be ready at a moment s notice.

12 Selecting Individual Disaster Relief Solutions Another objective for disaster recovery is to implement the right precautionary measures which will prevent a disaster from occurring in the first place. Some of the strategies for disaster prevention include: using an uninterruptible power supply (UPS) and or back-up generator in case of power failure, local system mirrors and data/disk protection, and anti-virus software with a solid system of checks and balances.

13 IT Implications For Disaster Relief Solutions The greater your business dependency on computers, the higher the commercial risks associated with any equipment failure. There are a number of examples of companies which simply failed to survive following severe data loss. Ignore the need for secondary data protection and disaster recovery at your peril. Data corruption, viruses, hard disk failure are all situations where you will have to located floppy disks, CD-ROMs, registration numbers, and software manuals to reload, rebuild and re-boot your system. With the right disaster recovery plan, your business receives some big advantages.

14 IT Implications For Disaster Relief Solutions It is no longer necessary to make an entire new set of disaster recovery floppies or CDs every time the server configuration is altered or when a peripheral such as a printer is added. Cost implications are minimized and downtime is reduced because it is no longer necessary to search for manuals, software disks, or registration numbers. Manual recovery from a disaster at a stressful time makes for a process that is error-prone. With the right disaster recovery system, user error during recovery and subsequent recovery failure is reduced significantly. Disaster recovery preparation and backup previously two separate tasks become one and the same process. A complete system restore can be performed from a remote location by an IT Administrator.

15 IT Challenges For Organizations Of All Sizes According to industry experts and analysts at Wikibon, the biggest IT challenge currently for organizations of all sizes is data protection and disaster recovery. With the increasing occurrence of natural disasters, such as SuperStorm Sandy, disaster recovery has taken the forefront in terms of business preparation. The challenge in terms of keeping a business running smoothly and effectively after any type of disruption is that many current business systems are not made to withstand the data deluge of recent years. Periodic technology reviews, refinements, and overhauls are a business investment well worth the time and money required.

16 Data Backup And Recovery Many organizations view backup as copies of data locally kept, while effective disaster recovery is defined as copies of data in a different location. This disconnect is both unnecessary and impractical particularly for smaller businesses. Recently, though, the solution is to back-up at a different location using a form of electronic transport like data replication over IP networks or leveraging cloud technology. Electronic transport can be safer, but it requires the use of two separate processes (and typically separate products) to backup and recover data. When an organization has one process for backup and another completely different one for disaster recovery, it minimizes efficiency and costs valuable time and money. A key consideration for determining the requirements of a backup and recovery solution is for the business to understand how fast critical data and applications need to be restored. The initial response is as fast as possible, but realistically speaking there is a finite answer and business requirement for how fast applications and data need to be recovered. Once the finite answer is determined, it is up to the organization to find ways to successfully the data faster than is needed even with any operational challenges or hiccups along the way.

17 Catalogs and Snapshots The current state of the art technology for speedy disaster recovery is snapshot technology. Snapshot technology captures data at a moment in time, similar to a camera. This means that data can be captured and recovered quickly by providing an identifiable data image. However, it is critical to have a catalog of data because without a catalog, you will be examining hundreds of snapshots to find the specific data you are looking to recover. After the disaster recovery requirements are determined, it is important to test the actual recovery environment. That way, you know both how effective your recovery process is and how long it will take. For example, you definitely don t want to find out that it takes days or weeks to test your recovery after your company has invested in the actual technology. Finding the right disaster recovery and data protection processes can seem particularly overwhelming in today s Big Data environment. By partnering with the right technologies and solutions, not only will your processes be streamlined for a quick and easy recovery, but organizations will be able to be confident that their firm can survive any disaster effortlessly.

18 Technology Solutions To Overcome Challenges IT solutions are an effective way to minimize business challenges, maximize productivity, and focus on your core services while reducing operating costs. Managing any size business requires a broad range of experiences, skills, and technology. While your staff and you have the right skills to easily handle most of your individual business needs, maintaining your IT environment is a skill best left for the experts. By partnering with the right IT services provider, you will save time and money in a way that increases productivity and provides the right technology-based solutions for your individual business challenges.

19 Technology Solutions To Overcome Challenges Here is how technology-based solutions can help overcome business challenges: Strategy With the right IT plan, including disaster recovery, your current and future needs are addressed. Partnering with an IT provider gives your business the skills and experience of a CIO without the payroll burden of hiring a CIO. Growth The foundation for all of your business growth is its IT network. With a customized plan which addresses your company s unique needs, you are building a flexible, expandable IT network which ensures that current and future employees have the right tools to communicate, collaborate, and share information. Regulator Considerations If you are in a market which is governed by state or federal regulations, your data needs to be safeguarded in very specific ways. With a custom, secure IT environment, regulatory requirements are easily met.

20 Technology Solutions To Overcome Challenges Productivity With appropriate management, all employees have access to the right data they need, when they need it, regardless of where they are working. Having a customized IT network which is maintained by experts ensures that all employees have access to the right data at the right time to increase productivity. Business Changes As any business grows and changes, so will its IT needs. By partnering with the right IT provider, you are creating the right circumstances for your business to keep operating no matter what happens now or in the future. Data Security No matter which market your business is in or the size of its operations, your business relies on proprietary data being secure from external attack and internal abuse. A layered defense run by IT experts not only provides solid disaster recovery, but it protects your data on a daily basis.

21 File And Application Enhancement Technology File and Application Enhancement services are a formal process which improves the value of a business s application assets during its operational lifetime. It is a program of analyzing and implementing potential improvement to an application in terms of business functionality, operational efficiency, technology, and infrastructure. The end result for businesses is a custom application with optimized cost of operation, increased effective lifespan, and enhanced business functionality. Instead of simply responding to change requests ad hoc during the lifetime of any application, the right system provides a focused program which improves all aspects of an entire application. What this means to business is increased valued with reduced operational costs. By incorporating in potential migrations and technology trends, a file and application asset is maintained over a longer operational lifetime, redevelopment costs are reduced, and ROI is enhanced.

22 Features And Benefits Include: Cost Effective Implementation Your custom IT solutions are backed up with 24/7 customer service that keeps your system running smoothly and within budget. Extended Life for Existing Applications By providing new capabilities which extend an applications effective lifetime, you receive greater returns than if the application itself was replaced. Technology Experts with Cross Industry Expertise With the right IT partner, you have access to a pool of technical and domain experts who provide the right solution for your unique business needs.

23 Disaster Recovery Solutions From QeH2 Disaster Recovery Solutions from QeH2 keep your business applications running when disaster or disruption occurs. The very word Disaster summons up images of fire, flood, power outages, and other side-wide catastrophes which require expensive recovery costs. While all disaster scenarios may not be extreme, they are all equally disruptive to business operations. Customers and employees must be able to successfully use business-critical applications at any time day or night. Access to business applications becomes even more critical in the wake of any type of disaster. Disaster recovery solutions based upon traditional backups will not work. Their recovery times can be measured in days and weeks instead of minutes and hours.

24 Business Continuity Planning QeH2 provides solutions which give your company a fool-proof disaster recovery plan with custom data security. QeH2 analyzes your network to ensure that all the proper systems are in place to keep your valuable data safe with its comprehensive disaster recovery plan. We make sure that you don t get caught without sound backups in place, the right restoration process, and a contingency plan. Should something disruptive happen without a proper plan fully implemented, QeH2 offers immediate response with disaster recovery services as well as data backup solutions. We ensure that your company is fully protected from computer and network failures, natural disasters and any potentially disruptive scenario which can cause network downtime or destruction.

25 Final Analysis When it comes to disaster recovery, many businesses of all sizes resist the responsibility because they are unsure where to get started, what to do, and how to do it. Businesses use information technology to quickly and effectively process information. From electronic mail and Voice Over Internet Protocol (VOIP) telephone systems, employees have many tools to transmit data. Losing any of that data can be severely detrimental to any size business. That is why having the right technology recovery strategies is imperative to restore hardware, applications, and data in time to meet the business needs. The impact of data loss or corruption from hardware failure, human error, malware, or hacking can be significant. Having a disaster recovery plan for the data backup and restoration of electronic information is imperative.

26 Final Analysis Implementing stringent data recovery plans begins with the performance of a business impact analysis. This thorough review examines the IT resources required to support time-sensitive business functions and processes. From the identification of the processes, recovery time for any IT resources will be matched up with the recovery time objective (RTO) for that function or process itself. All components including; hardware, software, data, and connectivity are taken into account in terms of business impact. From compiling an inventory of hardware (e.g. desktops, servers, laptops, and wireless devices), software applications, and data; businesses should develop an IT disaster recovery plan. The plan needs to include a strategy for ensuring that all critical information is backed up safely and effectively. Once the inventory is taken, it is important to identify critical software applications and data and the hardware required to run them. Using standardized hardware helps in replicating and reimaging new hardware. Ensure that copies of program software are available to enable the reinstallation on replacement equipment. In addition, prioritize the hardware and software restoration. With the right IT disaster recovery plan in place and documented, your business is protected. Remember to test the plan periodically to determine its effectiveness. No business wants to be caught short without the right disaster recovery plan. Partnering with a provider like QeH2 means you are safe in the knowledge that experts are taking care of the IT side of your business that way, you can focus on the core services you provide and growing the bottom line.

27 Business Continuity Planning About QeH2 QeH2 provides a wide variety of IT support and consulting services with a focus to go above and beyond the competition. We help you prevent data disasters with our Disaster & Data Recovery services all while providing you with remote access or on-site assistance, whichever your business needs. QeH2 helps improve your network performance, ensure system uptime, free emergency support and offers free computer support.