Business Continuity and the Cloud. Aaron Shaver US Signal, Solution Architect

Transcription

1

2 Business Continuity and the Cloud Aaron Shaver US Signal, Solution Architect

3 Overview What is BC/DR? Why should businesses have a strategy? Why do many business choose not to? How does the cloud change this? What are the latest architectures?

4 What is BC/DR? Business Continuity Plan (BCP): The overarching goal of a Business Continuity Plan (BCP) is for ensuring that the business will continue to operate before, throughout, and after a disaster event is experienced. The focus of a BCP is on the business as a whole and ensuring that those critical services that the business provides or critical functions that the business regularly performs can still be carried out both in the wake of a disruption and after the disruption has been weathered. Who, What, When, Why and Where

5 What is BC/DR? Disaster Recovery Plan (BCP): The Disaster Recovery Plan (DRP) provides a short-term plan for dealing with specific IToriented disruptions. The DRP focuses on efficiently attempting to mitigate the impact of a disaster and the immediate response and recovery of critical IT systems in the face of a significant disruptive event. Disaster Recovery Planning is considered tactical rather than strategic and provides a means for immediate response to disasters. How

6 What is RPO and RTO? Recovery Point and Recovery Time Objectives:

7 Legacy Architectures Cold Site Warm Site Hot Site Redundant Site Hr RTO 4-24 Hr RTO 15 Min to 4 Hr RTO 0 15 Min RTO Tape Backup Tape Backup Network Redundancy Offsite Recovery Target Storage Replication Network Load Balancing Application Clustering Storage Replication Network Load Balancing High Speed WAN

8 Managing Risk A threat is anything that can potentially cause harm to an asset. A vulnerability is a weakness that allows a threat to cause harm. 33% Major Fail RISK = THREAT + VULNERABILITY

9 Why BC/DR? The three common ways of categorizing the causes for disasters are whether the threat agent is natural, human, or environmental in nature. 1 Natural The most obvious type of threat that can result in a disaster is naturally occurring. This category includes threats such as earthquakes, hurricanes, tornadoes, floods, and fires. Historically, natural disasters have provided some of the most devastating disasters that an organization can have to respond to. 2 Human The human category of threats represents the most common source of disasters. Human threats can be further classified by whether they constitute an intentional or unintentional threat. 3 Environmental Threats focused on information systems or datacenter environments include items such as power issues (blackout, brownout, surge, spike ), system component or other

10 Why not BC/DR? 11% Routinely miss backup windows 39% Completed successful recoveries but not in the time frame in DR plan 33% Major Fail 67% Some Success 22% Backing up inactive data that should be destroyed or archived 28% Completed recovery on time and without issues

11 Why not BC/DR? Simple answer: It costs too much. Human Financial Material Legacy BC/DR can compete with the business you are trying to protect.

12 Legacy ROI Objective Business Impact Analysis:

13 New cloud architectures So what if resiliency was baked into your environment as opposed to in addition to your environment? Cold Site Warm Site Hot Site Redundant Site Hr RTO 4-24 Hr RTO 15 Min to 4 Hr RTO 0 15 Min RTO Backup-as-a- Service Backup-as-a- Service Virtual Recovery Resources Insurance Virtual Guest Replication Virtual Recovery Resources Network Load Balancing Application Clustering Virtual Production Resources Network Load Balancing High Speed WAN Asset

14 New cloud architectures

15 New cloud architectures

16 How cloud changes BC/DR Objective Business Impact Analysis: Risk = Threat + Vulnerability

17 Summary How does cloud change the calculation? 1. New technical features 2. Tighter RPO and RTO 3. Eliminates Capital Costs 4. Incremental costs that scale up and down 5. X-as-a-Service lowers human resource requirements 6. Eliminates owning and operating hardware and software 7. Lowers the total cost of the solution 8. Scalable environment 9. 24/7 Monitoring and Support 10. Easily transition from BC/DR to Production Hosting

18 Questions?