Enterprises are transforming, market place priorities are changing, Is your business ready?

Transcription

1 Enterprises are transforming, market place priorities are changing, Is your business ready? Presented by: Mike Errity, Vice President IBM Resiliency Services 1 14th Annual Continuity Insights Management Conference: The Road to Resilience

2 Speaker : Mike Errity, Vice President, IBM Resiliency Services GTS, Resiliency Services Monday, April 18, 2016, 9:45 a.m.-10:45 a.m. Title : Enterprises are transforming, market place priorities are changing, Is your business ready? Abstract : The explosion of mobile apps and cloud-based solutions for IT and business processes has created new, ambitious expectations for always-on, always-available service. These market dynamics were explored in a recent market study on business resiliency conducted by the IBM Center for Applied Insights. During this discussion, presenter will share comprehensive analysis of marketplace priorities, trends and demands followed by a perspective on innovative methods, skills, and techniques to achieve necessary resiliency capabilities. 14th Annual Continuity Insights Management Conference: 2 The Road to Resilience

3 Today we live (and work) in an always-on world 3

4 We surveyed 310 business continuity (BC) and disaster recovery (DR) professionals across 19 industries* Throughout the presentation we will lead a real time Interactive Poll to learn how your focus compares to our study results 60% of organizations have had to execute their disaster recovery plan due to a services disruption 40% Nearly of organizations have had to do so in the past 2 years *The respondent base consisted of BCDR leaders based in the U.S. and Canada who work in primarily in executive and managerial roles, including more than 60 percent who are Directors of IT or CIOs. Survey participants work for companies spanning 19 industries including manufacturing, financial services and health care ranging in size from less than 100 employees to more than 10, IBM Corporation

5 Its getting harder to maintain in an always-on environment with more interdependencies, new technologies and security risks Including an increasing number of critical systems in DR plan Addressing cybersecurity risks Top resiliency challenges Managing more points of disruption due to greater IT integration Securing funding needed to meet DR objectives Demonstrating strong ROI for DR investments Meeting tighter RTOs and RPOs Finding IT professionals with DR expertise Using analytics to better predict service disruptions Meeting rapidly rising business leaders expectations of DR capabilities 5

6 With rising numbers of critical systems and more IT integration points, DR programs are under pressure to expand their testing Mobile user interface into applications 30% Connectivity with supplier & business partner systems 27% 6

7 and DR programs still have a ways to go in addressing cybersecurity challenges 50% of organizations are not prepared to handle service disruptions from cybercrimes or attacks 7

8 Despite the steep challenges, a group of highly resilient organizations are leading the way with integrated DR plans and robust testing Integrated & flexible 31% Masters adopt an integrated strategy for DR with more frequent and holistic testing. DR approach Siloed & fixed 26% 44% Specialists have begun to improve their testing and security, but still haven t quite made the leap to an integrated approach. Tacticians are still testing systems individually and somewhat infrequently, while treating DR as primarily an IT issue. Occasional & primarily compliance-driven Testing approach Frequent & robust Note: These three segments were revealed through cluster analysis of more than 42 factors, such as workloads covered in planning and testing, frequency of testing, use of technology and other characteristics of respondents DR approach. 8

9 Why follow the Masters? They report significantly better performance against key DR metrics Overall Performance Resumption of service Masters vs. Tacticians Specialists Masters Tacticians 14% 34% 55% Report their DR performance is better than 4.0x others in their industry 47% 55% 76% Ensure rapid resumption of revenue-generating 1.5x processes 28% 53% 72% Achieving recovery time objectives (RTOs) 2.5x 27% 44% 70% Ensure rapid resumption of interfaces with partners 2.5x 22% 35% 53% Cost Lowering recovery costs 2.5x 9

10 Masters take a comprehensive approach to disaster recovery Approach DR strategically 2.5x more likely to maintain an integrated DR plan 3.5x More likely to involve the CISO in DR planning Integrate security Exploit new technologies 15x more likely to use diagnostic analytics to pinpoint risk 2.5x more likely to test at least annually Test rigorously 10

11 Masters consider the entire enterprise when crafting DR plans and are embracing new technologies faster than peers Tacticians Specialists Masters Masters vs. Tacticians Strategy Involve board in DR planning 34% 47% 73% 2.0x Maintain an integrated DR plan 19% 26% 46% 2.5x Involve external experts in DR planning, execution & evaluation 21% 34% 44% 2.0x Integrate suppliers into 9% 12% 39% overall testing 4.5x Use of new tech Enable real-time mobile 16% 34% 51% updates during disruptions 3.0x Use diagnostic analytics to pinpoint DR risks 3% 18% 46% 15.0x Deploy cloud for recovery (e.g., DR-as-a-service) 12% 23% 25% 2.0x Use predictive analytics to anticipate service disruptions 0% 5% 22% * *Multiple cannot be calculated because denominator is 0--no Tacticians reported using predictive analytics. 11

12 Masters test often and involve relevant risk and security teams in disaster recovery planning Tacticians Specialists Masters Masters vs. Tacticians Testing Test at least annually 34% 68% 89% 2.5x Include testing requirements 33% 42% 43% 64% in SLAs 2.0x Maintain consistency between DR test and production environments 13% 19% 55% 4.0x Adapt future plans based on testing results 21% 34% 45% 2.0x Security Involve CISO in DR planning 16% 36% 57% 3.5x Integrate enterprise security 21% 32% 52% and risk management into DR 2.5x Have security polices in place 4% 16% 47% and working during DR tests 12.0x Involve CRO in DR planning 6% 19% 30% 5.0x 12

13 How can your organization become a Master? Establish a strategic, integrated approach Design a robust testing program Collaborate with security and risk leaders Incorporate new technologies Work with internal leaders, including the board, as well as with supply chain partners and knowledgeable industry experts. Base your strategy on a thorough understanding of compliance requirements. Consider the needs of both your business and its customers. Test annually at a minimum and develop the ability to test in real-time with ad hoc queries from any device. Incorporate insights learned from previous tests into DR plans. Extend testing across internal infrastructure, new mobile and cloud-based applications, and connections with supply chain partners. Partner with risk teams to enhance DR compliance and governance. Engage your security team to integrate cybersecurity into DR planning. Consider having internal audit teams sign off on DR plans to further ensure you re meeting regulatory requirements. Explore using cloud, advanced analytics and mobile both to respond more effectively and to prevent future service disruptions. Use social technologies to not only communicate system status and adverse events in real time but also to monitor economic, environmental or other external events that could disrupt business. Benchmark yourself against DR industry leaders to pinpoint areas for improvement. 13

14 In today s world, business resilience is no longer optional IBM offers: A complete portfolio of DRaaS and cloud resiliency services, in collaboration with IBM Cloud and IBM Security, addresses clients varied management needs Resiliency Consulting Offerings Failover to identical system image Fast, reliable, verifiable, consistent RTO in minutes RPO in seconds Systematic Failback 24x7 management portal Textron, a multi-industrial maker of aircraft, was concerned about the possibility of a critical disruption that could compromise their enterprise. They rely on IBM to help them plan for disruptions of all forms, which offers them greater flexibility in adjusting resiliency strategies as business needs change, by moving between cloud, shared floor space, and dedicated recovery techniques and to implement a hybrid availability solution. Enterprises deal with incidents every day before they escalate to the point of disruption. Those who follow their incident response plan every day when reacting to events or threats in the network are better equipped to respond. Diane Schwarz, CIO, Textron 14

15 Learn more from the IBM Center for Applied Insights Masters of disaster recovery: How highly resilient organizations excel bit.ly/ibm-resiliency-report Visit us online IBM Resiliency Services Our new online self-assessment tool is available Here is our self-assessment Tool Try it out : So are you a master of disaster recovery? Take the quick 10 minute assessment to find out where you rank and get ideas on how to improve. Follow us on Join the discussion on LinkedIn IBM Resiliency 15