Business Resilience for the On Demand World Yvette Ray Practice Executive Business Continuity and Resiliency Services

Transcription

1 Business Resilience for the On Demand World Yvette Ray Practice Executive Business Continuity and Resiliency Services

2 What s on the minds of 450 of the world s leading CEOs 2 CEO needs Revenue growth with cost containment Key competency: responsiveness Critical success factor: enable effectiveness of people and processes CIO challenges Aligning IT and business goals to grow revenue and contain costs Building responsiveness and agility into the organization through IT How can IT help enable people and teams to be more effective

3 Importance of Business Resilience With the constant emergence of new regulations, security threats, and service outages ranging from deliberate attacks to human error IT business is increasingly at risk. Non-resilience affects: Growth Business risk Competitive posture Compliance to regulations Business Resilience is an integral thread that runs through the entire operation. An electronics manufacturer Source: IGS FactPoint Study, May

4 Business resilience enables comprehensive risk management through the integration of business continuity, recovery, high availability and security management Business resilience is the ability to Manage information-based risks so you can rapidly adapt and respond to opportunities and threats while continuing business operations Business resilience represents a shift from the old paradigm of experience and react to a new paradigm of anticipate and adjust. 4

5 It s about mitigating risks while becoming an On Demand business. Continuity of business operations Regulatory compliance Security, privacy and data protection Integrated risk management Knowledge, expertise and skills Market readiness Improves your ability to maintain continuous business operations by building processes and infrastructures that are responsive, highly available and scalable. Helps you comply with government and industry regulations and standards. Helps you protect and manage the existence, integrity, accessibility, privacy and confidentiality of data, critical information, systems and physical resources. Increases the effectiveness of your overall risk management programs by taking a unified and governed approach. Improves the resilience of your business through the transfer of IBM knowledge and skills, or by utilizing IBM resources. Enhances your ability to sense and respond to changes in customer demands or market opportunities to stay competitive and grow. 5

6 To achieve this IBM has identified six key Business Resilience layers that expand into over 130 objects in an enterprise. Each must be addressed to achieve business resilience. Strategy and Vision Governance strategy Financial strategy Security strategy Availability strategy Communications strategy New product/services strategy Risk management Processes Business Process Sales order Finance and accounting Enterprise resource planning Customer relationship management Supply chain management Quality management Research and development IT Process Change management Problem management Incident management Availability management Strategy and Vision Organization Processes Applications and Data Technology Facilities Business Resilience Facilities Physical and logical security Access controls Power protection Environmental considerations Organization Roles and responsibilities Structures Human resource management Skills Cross-organizational cooperation Applications and Data Data and application security Data storage Application architecture and design Backup and recovery Technology Hardware architectures System software Middleware Networks 6

7 Businesses Resilience works to integrate recovery, continuity, availability and security to meet the On Demand business needs of today and tomorrow. Customer Data Center IBM Recovery Center Networks Business Resilience Today and Tomorrow Customer Business Center Internal Recovery Center 5 Years Ago Customer Data Center IBM Recovery Center Business Continuity 15 Years Ago Customer Data Center IBM Recovery Center IT Recovery 7

8 It s about maintaining access to data, protecting critical business assets, managing risk, aligning recovery costs based on business risk and information value Business Drivers Business risk reduction Operational continuity Asset protection Benefits Minimize / Eliminate Business Interruptions Revenue Protection Resume Business Operations quickly after a significant Interruption - outage Meet company s IT, Operational and Regulatory requirements Maintain competitiveness 8

9 Aspects of Business Resilience Business Resilience High Availability Continuous Operations Disaster Recovery Fault-tolerant, failure-resistant and Security Protection against unplanned infrastructure with nondisruptive backups and but allows for an uninterrupted through reliable, predictable Secured data that ensures privacy outages such as disasters system maintenance flow of data to authorized users recovery Protection of critical Business data Recovery is predictable and reliable Operations continue after a disaster Costs are predictable and manageable 9

10 To be successful, Business Resilience requires an end to end IT solution xseries pseries iseries Solaris HP-UX WinNT/2000 zseries xseries pseries iseries Solaris HP-UX WinNT/2000 Operating System Applications Operations Staff zseries Data Network Staff Applications Staff Management Control Five IT components, blended into a comprehensive Business Continuity architecture, results in the best solution: Telecom Network Physical Facilities 1. Servers 2. Storage (Disk and Tape) 3. Software and Automation 4. Networking and Infrastructure 5. Skills and Services 10

11 Automation is critical for successful recovery and continuity Recovery times must be repeatable and reliable Allows business continuity processes to be built upon a reliable, consistent recovery time Large scalability Recovery times must be known even as the system scales In today s time to market world, it is unacceptable to not have assured scalability Affordable testing Repeatable, reliable, scalable business continuity can only be assured through testing that can be affordably be performed often Fundamentally, requires automation TEST as you RECOVER, RECOVER as you TEST! 11

12 Why Automation? Disk Mirroring and Consistency Group Moving the data is not the same thing as creating a restartable database Disk mirroring objective: Create consistent copy at remote site, suitable for database restart Consistency Group Source Target Data consistent copy In the event of an unplanned outage, need mirroring technology to assure data consistency and provide restartable databases. Must implement the disk mirroring Consistency Group function! Server clustering and disk mirroring must be coordinated. Automation a Must for effective High Availability and successful failover. 12

13 Roadmap to Business Resilience Application and database specific automation of core technologies for business continuity Integration of core technologies into server environments and automation to enable business continuity Core technologies to do backup and restore, disaster recovery and continuous operations Application or Database specific Platform specific For HA environments Maintains data integrity Cross platform Resiliency Family Hardware Infrastructure with H/A software Fault-tolerant Highly Available 13

14 A major part of a resilient business is its ability to quickly recover from any disaster and maintain business continuity. Recovery from a disk image Recovery from tape copy Cost Tier 7 Site Mirroring with automated recovery Tier 6 - Disk mirroring (with/without automation) Tier 5 Software replication Tier 4 - Point in Time disk copy Tier 3 - Electronic Vaulting Tier 2 - Hot Site, Restore from Tape TAPE DISK REPLICATION SW MANAGEMENT SW NETWORK D/R AUTOMATION SERVICES 15 Min. 1-4 Hr Hr Hr Hr.. 24 Hr.. Days Recovery Time Objective Tier 1 Restore from Tape Best Business Continuity practice is to blend solutions in order to maximize application coverage at optimum cost 14

15 The ability to maintain Business Continuity can be categorized into three segments. Continuous Availability Tier 7 Cost Tier 6 Rapid Data Recovery Tier 4 Backup/Restore Tier 3 Tier 2 Tier 1 15 Min. 1-4 Hr Hr Hr Hr.. 24 Hr.. Days Recovery Time Objective Addressing customer needs for high availability, continuous operations and disaster recovery 15

16 These segments can be further refined by their characteristics. Continuous Availability Rapid Data Recovery Backup/Restore Offering descriptions Automated failover of total systems / site failover 7x24 application & data availability Transparent recovery of servers, storage, network Ultimate Disaster Recovery protection High availability of data and storage systems (storage resiliency) Automated or manual failover of storage systems Fast recovery of data/storage from disasters or storage system failures Backup and restore from tape or disk Disaster recovery from tape RTO= seconds to mins (Tier 7) RTO= hours (Tiers 4-6) RTO= hours to days (Tiers 1 4) Business Value Continuity of business operations, reduced business risk, improved business resiliency Storage resiliency, rapid recovery of data, reduced business risk Protection at an affordable TCO Key Offerings Continuous Availability for AIX, Windows and zos Rapid Data Recovery for UNIX, Windows and zos Application Integrated Backup Disk to Disk to Tape Tape Backup 16

17 IBM has developed key technology to help enable Business Continuity Integrated Backup for DB2, Exchange FlashCopy Backup/Restore for SAP Continuous Availability for Windows, AIX Rapid Data Recovery for UNIX, Windows GDPS, GDPS HyperSwap Manager FlashCopy, Metro Mirror, Global Mirror Tivoli Storage Mgr, TPC Replication Mgr, DFSMS ESS, DS8000, DS6000, DS4000, SAN, SVC, SFS, Tape, zseries, pseries, xseries Application or Database specific Platform specific High Availability and Disaster Recovery Replication technologies Management Fault-tolerant Highly Available systems Components Solutions Resiliency Family 17

18 Getting there. Moving toward Business Resilience involves the strategy, preparations, and plans to provide business process protection in the event of a disruption at any layer. Developing a Business Resilience plan involves understanding and balancing employee, customer, and stakeholder needs and delivering supporting capabilities enterprise-wide. A Business Resilience plan in terms of processes, workforce, and data usage enables easier means of scaling of the business and adapting to change. The majority of the success factors lay in people and procedures. Automation and Technology are critical. Strategy and Vision Organization Processes Applications and Data Technology Facilities Business Resilience a BUSINESS decision! 18

19 Thank you

20 Continuous Availability for Windows Challenges Protect critical applications and data running on Windows Rapid recovery from unplanned site disasters Minimize disruption from planned outages (maintenance, upgrades..) IBM Solution Stack Value Increased business resiliency, data protection Automated, near instantaneous recovery Continuity of business operations Target Customers MSCS server IP Metro or Global Mirror FCP MSCS server DS6000/DS8000/ESS/SVC (DS4000*, MSCS multi-mode*) MSCS installed accounts Production site Recovery site Metro Mirroring + automation code Services (STG or BP) IBM xseries servers and non IBM Intel-based servers Windows customers requiring high availability and D/R of servers/storage/network Tier 7 SAN * Target support: 4Q

21 . Sweden Business Challenge Continuous application availability (for clustered MS SQL servers), Protection of data, Complete Site Recovery within minutes (tier 7) Solution IBM TotalStorage Solution: Geographically Dispersed Sites for Microsoft Cluster Service (MSCS), IBM ESS Model 800 with Metro Mirror, Installed early December 2003, in production over 30 days Business Benefits: Business Resiliency Complete Site failover in matter of minutes Protection and recovery of business data Protection against downtime SANDVIK manufactures equipment and tools for metalworking industry; rock excavation; and variety of specialty steel products. 21

22 Continuous Availability for AIX Challenges Protect critical applications and data running on AIX Value Increased business resiliency, data protection Production Site Router Recovery Site Router Protection against site disasters Minimize disruption from planned outages (maintenance, upgrades..) Automated, near instantaneous recovery Continuity of business operations Server A Server B Non-IP Heartbeat Server C Server D IBM Solution Stack IBM pseries Servers w/hacmp-xd Target Customers HACMP installed accounts Primary ESS/SVC SCSI or FC Secondary ESS/ SVC DS6000/DS8000/ESS/SVC Flashcopy, Metro Mirror ercmf (optional) SAN AIX customers requiring automated, high availability and D/R of servers, storage, and network. PPRC Links Router Router IBM IGS Services to install/implement. Tier 7 22

23 Continuous Availability for z/os (GDPS) Challenges Protect critical applications and data running on z/os Continuity of business operations Controlled site switch for both planned & unplanned outages Value Minimal impact to applications Automated, near instantaneous recovery-no manual steps Continuity of business operations 3 Primary Host GDPS/XRC System Data Mover System Data Mover Secondary Host IBM Solution Stack Target Customers IBM zseries Servers w/parallel Sysplex DS6000/DS8000/ESS/VTS Flashcopy, Metro Mirror, or Global Mirror IGS Services to implement GDPS/PPRC, GDPS/XRC, GDPS/Open LUN Mgmnt zseries installed accounts Customers requiring automated, high availability and D/R of servers, storage, and network over multiple sites FlashCopy Primary Tier 7 Secondary FlashCopy 23

24 Pershing IBM Business Continuity and Resiliency Services Vision Provide customers with secure, innovative technology solutions that safeguard information and reduce data loss Challenge Set a new precedent for data protection by creating a site that can mirror more than 30 terabytes of data Solution Our emphasis on ensuring the integrity and availability of the securities data we receive and deliver led us to choose IBM as our technology provider to build and support one of the world s largest mirrored-data centers. Brian T. Shea, Chief Operating Officer, Pershing. Worked with IBM Global Services consulting and product specialists to develop a mirror site using 24 IBM TotalStorage Enterprise Storage Servers and IBM Geographically Dispersed Parallel Sysplex and IBM Extended Remote Copy software technologies Value Significantly improved system reliability, security and support, fast automated data recovery with limited data loss and reduced backup window significantly 24

25 Rapid Data Recovery for UNIX/Windows via SVC22 Challenges Value Single pane of glass to manage replication across multiple, mixed storage (tiered) environment. Platform to help quickly allocate resources when needed Virtualize storage environment and better utilize mix storage environment Protect data and recover quickly in case of an outage SVC Metro Mirror SVC IBM Solution Stack Target Customers LUN 1 LUN 2 LUN 3 LUN 4 LUN 1 LUN 2 LUN 3 LUN 4 LUN 1 LUN 2 LUN 3 LUN 4 LUN 1 LUN 2 LUN 3 LUN 4 SAN Volume Controller Disk systems (IBM, EMC, HDS) Metro Mirror, FlashCopy IBM and non IBM UNIX and Intel-based servers SAN Customers with multivendor disk systems serving heterogeneous servers types Customers want low cost storage at remote site EMC ESS Tier 4 FlashCopy outside the box Tier 4-6 DS4300 DS4800 Tier 6 Disk Mirroring outside the box 25

26 SVC at LUN 1 LUN 2 SAN Volume Controller LUN 3 Storage Vendor 1 LUN 4 LUN 1 LUN 2 LUN 3 Storage Vendor 2 LUN 4 Metro-Mirror LUN 1 LUN 2 LUN 3 Storage Vendor 3 SAN Volume Controller LUN 4 LUN 1 LUN 2 LUN 3 Storage Vendor 4 LUN 4 Cross-device consistency groups SAN Peer-to-Peer Remote Copy PPRC) outside the box Business Objectives Scalable, reliable infrastructure for critical PACS initiative Centralized data replication management with 7x24 resiliency Centralized backup Solution Approach SVC, DS4000 (FAStT), TSM, 3583, 3584 Tape, PPRC & FlashCopy Enables rapid data transfers today and scales easily for future growth Increased staff productivity, automated, centralized B/R 26

27 Rapid Recovery for UNIX/Windows (ercmf) Challenges Set up/manage all copy function tasks for single/multiple disk systems Sustainable, repeatable, failover/failback with consistency across disks Automate the process and have a single point of control IBM Solution Stack ESS, DS6000, DS8000 FlashCopy, Metro Mirror, Global Mirror IGS services to install/implement IBM and non IBM UNIX and Intel-based servers SAN Value Automated management of planned and unplanned Failovers Data Consistency between both sites Can bring up remote site with a DB restart Target Customers Enterprise customers needing automated management of replication-d/r AIX Linux Windows Sun HP Site 1 ercmf FB FB A A FB FB A A FB FB A A IP PPRC ercmf FB FB A A FB FB A A FB FB A A Site 2 AIX Linux Windows Sun HP Scalable Data Consistency Group Integrity Tier

28 ercmf at a Large Financial Institution in the East Journal Volume Host Volume GLOBAL MIRROR Host Volume Journal Volume swap Shadow Volume Shadow Volume ercfm Console Business Objectives Maintain customer operations by running production from either a primary or second site as required Use common tools / processes for Legacy & distributed systems Solution Approach ercmf (AIX host) to manage Global Mirror operations across ESS 800s - 60 miles apart ercmf automation to swap production workloads as needed 28

29 Rapid Recovery for z/os (GDPS HyperSwap Mgr) New Challenges Local HA of data during planned maintenance, data migration in a z/os environment Protection against local storage system failures Continuity of application processing Near continuous access to data Value Automated swapping between storage systems -no manual steps Continuity of business operations 29 IBM Solution Stack zseries Servers w/parallel Sysplex DS6000/DS8000/ESS/VTS Flashcopy, Metro Mirror IGS Services to implement GDPS/PPRC HyperSwap IBM zseries servers SAN Target Customers z/os accounts needing continuous application processing or protection against local storage system failures. Any zseries configuration using Synchronous PPRC PPRC primary (Synchronous) Metro Mirror Tier 4-6 PPRC secondary

30 GDPS HyperSwap at a large Credit Report processing firm Business Objectives Achieve 7x24 Business Operations for key legacy applications by masking Disk outages. Non-disruptive, automated handling of planned and unplanned I/O interruptions Deploy initial, strategic path to protect against site failures UCB application UCB Solution Approach GDPS HyperSwap Mgr coupled with ESS storage (Metro-Mirror) in a single site environment No operator intervention required all GDPS managed P PPRC Large number of volumes Including Sysres, page & catalogs S 30

31 Backup/Recovery using GDPS/PPRC & GDPS/XRC and IBM TotalStorage Peer-to-Peer Virtual Tape Server (PtP VTS) Existing workload modes: Balanced, Preferred New workload mode to support GDPS: Primary Primary VTS performs all host I/O Secondary receives copies GDPS sets copy mode to 'immediate' Tape control data sets to be placed on PPRC volumes Planned and unplanned site switch Coordinated disk / tape failover in single GDPS script GDPS lists volumes 'in flight' to facilitate manual adjustment of tape control data sets after unplanned failover Secondary data consistent across disk and tape Integrated disk / tape site failover Vastly reduced complexity in site failover PtP VTS Tier

32 Lowe s Home Improvement Center Vision To provide more stringent controls on its backup and recovery solutions for business continuity. Challenge Desired to mirror its direct access disks and implement a virtual tape system so that it could access its critical tape data directly from its business recovery site. Solution Value Deployed an IBM TotalStorage 3494 Peer-to-Peer Virtual Tape Server, which replicates data from one site to a remote site. Improved the protection of its critical business data while eliminating the need to transport backup tapes offsite. Allows non-disruptive microcode and upgrades. Business Continuity 32 Note: For more information please contact the IBM sales representative. Do not contact customer directly. Individual user results may vary.

33 Disclaimers con t The provision of the information contained herein is not intended to, and does not, grant any right or license under any IBM patents or copyrights. Inquiries regarding patent or copyright licenses should be made, in writing, to: IBM Director of Licensing IBM Corporation North Castle Drive Armonk, NY U.S.A. The performance data contained herein was obtained in a controlled, isolated environment. Actual results that may be obtained in other operating environments may vary significantly. While IBM has reviewed each item for accuracy in a specific situation, there is no guarantee that the same or similar results will be obtained elsewhere. Customer experiences described herein are based upon information and opinions provided by the customer. The same results may not be obtained by every user. Trademarks The following terms are trademarks or registered trademarks of the IBM Corporation in either the United States, other countries or both. IBM, S/390, ES/3090, ES/9000, AS/400, RS/6000, MVS/ESA, OS/390, VM/ESA, VSE, TPF, OS/2, OS/400, AIX,z/OS, FlashCopy DFSMS/MVS, DFSMS/VM,, DFSMSdfp, DFSMSdss, DFSMShsm, DFSMSrmm, FICON, ESCON, TotalStorage, Enterprise Storage Server, iseries, pseries, xseries, zseries Windows NT and Windows 2000 are registered trademarks of Microsoft Corporation. Other company, product, and service names mentioned may be trademarks or registered trademarks of their respective companies. 33

34 Disclaimers Copyright 2003 by International Business Machines Corporation. THIS PRESENTATION IS INTENDED ONLY AS A STATEMENT OF IBM'S CURRENT INTENTIONS, PLANS, OBJECTIVES AND GOALS WITH RESPECT TO THE DEVELOPMENT OF THE ESS PRODUCT AND RELATED FEATURES AND SERVICES AS OF THE DATE OF THIS PRESENTATION. IBM'S INTENTIONS, PLANS, OBJECTIVES AND GOALS WITH RESPECT TO THE ESS PRODUCT AND RELATED FEATURES AND SERVICES ARE SUBJECT TO CHANGE OR WITHDRAWAL WITHOUT PRIOR NOTICE. IBM MAKES NO REPRESENTATION OR GUARANTEE THAT IT WILL BE ABLE TO ACHIEVE OR IMPLEMENT THE PRODUCT DEVELOPMENT MILESTONES, OBJECTIVES, GOALS, FEATURES OR IMPROVEMENTS SET FORTH IN THIS PRESENTATION. THE ABILITY TO ACHIEVE OR IMPLEMENT SUCH MILESTONES, OBJECTIVES, GOALS, FEATURES OR IMPROVEMENTS DEPENDS ON A LARGE NUMBER OF FACTORS, MANY OF WHICH ARE NOT WITHIN IBM'S CONTROL. ANY RELIANCE ON THE STATEMENTS OR PREVIEWS CONTAINED IN THIS PRESENTATION IS AT THE RELYING PARTY'S SOLE RISK AND WILL NOT CREATE ANY LIABILITY OR OBLIGATION FOR IBM. No part of this document may be reproduced or transmitted in any form without written permission from IBM. Product data has been reviewed for accuracy as of the date of initial publication. Product data is subject to change without notice. This information could include technical inaccuracies or typographical errors. IBM may make improvements and/or changes in the product(s) and/or programs) at any time without notice. References in this document to IBM products, programs, or services does not imply that IBM intends to make such products, programs or services available in all countries in which IBM operates or does business. Any reference to an IBM program or product in this document is not intended to state or imply that only that program or product may be used. Any functionally equivalent program or product, that does not infringe IBM's intellectually property rights, may be used instead. It is the user's responsibility to evaluate and verify the operation of any non-ibm product, program or service. THE INFORMATION PROVIDED IN THIS DOCUMENT IS DISTRIBUTED "AS IS" WITHOUT ANY WARRANTY, EITHER EXPRESS OR IMPLIED. IBM EXPRESSLY DISCLAIMS ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR INFRINGEMENT. IBM shall have no responsibility to update this information. IBM products are warranted according to the terms and conditions of the agreements (e.g., IBM Customer Agreement, Statement of Limited Warranty, International Program License Agreement, etc.) under which they are provided. IBM is not responsible for the performance or interoperability of any non-ibm products discussed herein. Information concerning non-ibm products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products in connection with this publication and cannot confirm the accuracy of performance, compatibility or any other claims related to non-ibm products. Questions on the capabilities of non-ibm products should be addressed to the suppliers of those products. 34