A Modern Guide to Optimizing Data Backup and Recovery

Transcription

1 WHITE PAPER A Modern Guide to Optimizing Data Backup and Recovery What to Consider in an Enterprise IT Environment

2 A Modern Guide to Optimizing Data Backup and Recovery Data is the lifeblood of any organization, but many companies are drowning in it. Enterprise data continues to grow in volume and complexity and it is no longer confined to a defined set of local repositories. In the modern enterprise environment, data is stored and accessed on multiple devices and endpoints, including laptops, tablets and smartphones. Corporate data now spans LANs, WANs and geographic locations such as branch or remote offices, creating formidable challenges for managing it and safeguarding it, often with limited resources, budgets and personnel. The high risks of inadequate data protection Corporate users have high expectations for data and applications both need to be available and responsive so they can do their jobs effectively. Data loss can dramatically limit the productivity of workers and affect the company s bottom line, while a catastrophic data loss event can threaten the very existence of an organization by irreparably damaging the reputation of a business and its brand by rendering it incapable of serving customers. Most IT professionals understand that protecting data through regular and verified backups is a standard best practice, and nearly all enterprises have backup and recovery systems in place. However, IT organizations face many competing demands on their attention, and data backup and recovery strategies commonly languish as a low priority. Only when some degree of data loss occurs does backup and recovery get higher priority. 2

3 Evaluating the options Enterprises that proactively seek to establish data backup infrastructure as part of an overall disaster recovery strategy must contend with a plethora of technology options and deployment models, from solutions that are implemented within a company s firewall to engaging a fully outsourced managed service provider that specializes in offering cloud backup services. Evaluating what is right for your organization can be a complex process. Implementing a comprehensive data backup and recovery plan is an essential role of any IT organization. A properly structured plan not only dramatically reduces risks to the organization, but it can also achieve more effective resource allocation, freeing up IT personnel to be deployed to more strategic initiatives. This guide will take you through several important considerations for optimizing your backup and recovery systems, including the importance of distributed and remote data, managing physical and virtual environments, resource allocation and data lifecycles. It will also address how to get better insights into what data resides where in your organization, how it is being used, and most importantly, how to ensure that data can be recovered promptly in the event of data loss. Throughout the guide, the roles that cloud backup, recovery and restore technologies and services can play will be examined in the context of enterprise IT environments. Planning for Change As an organization changes and grows, so does its IT infrastructure. Backup and recovery systems must follow suit to ensure continuous data protection, and a variety of pressures borne out of shifts in both business and technology requires IT organizations to revisit how they protect corporate data. IT professionals face several significant trends that affect backup and recovery: lmore people, more data: Whether it s through organic growth or corporate acquisitions, more employees mean more endpoints generating more data. lnew infrastructure and applications: The addition of new applications, operating systems, hardware and additional facilities often has a domino effect on your data protection planning and the systems you use for backup and recovery. lmore mobile data: The trend toward Bring your own device (or BYOD) means employees increasingly access corporate data and applications on their own laptops, smartphones and tablets. This requires IT organizations to change how they track where data resides, especially because mobile devices are more easily lost, stolen or damaged. In addition, mobile workers who rarely or never come into the office to connect to the company network must also have their data protected. 3 White Paper: A Modern Guide to Optimizing Data Backup and Recovery

4 lcompliance pressures: Depending on your industry, you likely face a gamut of government regulations or professional standards that you must adhere to when handling certain kinds of data. lintroduction of new technologies: Some or all of your data protection strategy may still rely on systems such as tape or disk-to-disk, while other aspects of the organization push toward the adoption of cloud. Integrating new forms of technology can present challenges for maintaining the integrity of backup systems. ladoption of cloud-based applications and platforms: As enterprises increasingly adopt Software-as-a-Service (SaaS) and Platform-as-a-Service (PaaS) models, more data and applications are residing offsite with third-party service providers. These services may or may not provide sufficient redundancy. Although you are not directly in custody of the data and your custom applications, it is vital that you make provisions for backing them up in the event your SaaS or PaaS service provider fails. A Service Level Agreement (SLA) with the service provider may include backup and recovery but the responsibility ultimately lies with your organization to ensure adequate protection of your data. lnew management: Leadership changes such as a CIO may prompt a review and refresh of your entire IT infrastructure or key portions of it, which can raise issues for backup and recovery. Any of these common scenarios may compel an organization to re-evaluate its data backup and recovery strategy and supporting platforms, especially if a legacy system has technological limitations that prevent it from easily adapting. significant data loss event occurs, but most IT teams are expected to dedicate their focus to more strategic projects. Striking the right balance Relegating backup and recovery to the backburner is a risky proposition. When managing this function for the business, IT organizations need to strike the correct balance between risk, cost and shifting requirements. Many enterprises view their IT environments and compliance issues as too complex to simply outsource everything to a managed service provider. But external providers can offer important expertise and the right technology platform can enable a balanced approach to align the value of data with the total costs of protecting it. In order to optimize how backup and recovery works within the enterprise and the supporting role IT personnel play organizations must have a comprehensive understanding of its data and the requirements for restoring it when something goes wrong. REQUIREMENTS High risk, low reward IT organizations are under constant pressure to become more efficient and to do more with less. Even if your company operates in an especially data-intensive industry, the backup and recovery of data is not your core business. However, it is a mission-critical function that requires infrastructure and professional resources. As much as organizations would like backup to be a setit-and- forget-it system, the fact is all solutions need some oversight, management and occasional updates. Highly automated low touch in-house backup and recovery systems still require regular monitoring and verification to ensure that they are achieving performance benchmarks and adhering to policies for data retention and acceptable recovery windows. For IT organizations, this is a high-risk, low-reward situation: the value of their efforts may never be recognized until a COST RISK Not all data is created equal Data is a ridiculously broad and oversimplified term. It is not just a single file created by the CEO or summer marketing intern; it could be a data set, a database, an application or entire operating system, or a snapshot of all live data within an organization at any given time. To some degree, all data is important, but clearly not all data has the same value to the corporation. 4

5 What is your data really worth? The challenge most organizations face is in assigning the right value to data in terms of how it is backed up. They no longer have the luxury of treating all data equally; they now face a torrent of data from different sources, in different formats and structures. Even with the cost of storage what it is, backing up all of it on the same medium is too costly. IT organizations often struggle to make informed accurate decisions about what data needs to be kept, for how long, and under what circumstances. One major pitfall that organizations should avoid is choosing to not backup some data at all. Although this can reduce the costs related to storage and data management, it introduces risks that important information will somehow not be preserved. Of course, some organizations may not even realize that some data is not protected, because, it is stored on mobile devices such as laptops, tablets and/or smartphones. Different data has different demands A one-size-fits-all approach to data protection is no longer feasible, so backup and recovery strategies must be strategically aligned to business needs in order to balance availability and cost. A well-designed data backup and recovery strategy should define how to safeguard mission-critical data using a different standard than for lower priority data, such as s, that still must be retained for compliance or competitive objectives. Depending on your industry and business operations, your data will require a unique range of recovery time objectives (RTO) and recovery point objectives (RPO). Ultimately, a mix of backup and recovery models might be used; with some data stored on-premise in a central data center while a service provider might store other, lesssensitive information in the cloud. Ideally, even this kind of hybrid model could be knitted together by a common software platform that makes it easier to manage and adjust. Getting a complete picture Before you can start determining how different types of data are backed up, you need to have a comprehensive view of all data that is in the enterprise IT environment, and how it is currently protected. Undertaking a recoverability assessment can reveal important information such as: lthe reliability of backup and recovery systems already in place, including its ability to meet recovery time and point objectives (RTO and RPO) lwhether there are some types or locations of data in the enterprise, such as on laptops, smartphones or tablets, that are not adequately protected lhow existing data storage infrastructure could be optimized to backup data more cost effectively based on its value levidence of duplicate data levidence of out-of-date archived data External experts in backup and recovery can play a valuable role in completing a comprehensive and independent review of your IT infrastructure and backup systems while assessing organizational risk and exposure. This assessment can be shared with all stakeholders and help make the business case for moving to new models including cloud services. This recoverability assessment should also be performed within the context of a larger disaster recovery plan to account for all contingencies. Addressing the data glut There are two key strategies that enterprises can use to more efficiently manage growing volumes of data: ldeduplication identifying duplicate data that is queued for backup and rationalizing what is stored. Some systems compare all data based on its content so it does not matter if the files are on different servers or have different names. Common data is stored to the appropriate repository and a pointer/stub is used to point from the data s original location to the library location. This should be a continuous process as common data can appear at any time. lcompression in combination with deduplication, data compression further reduces the amount of data that must be transmitted and stored. The compression ratio that can be achieved depends on the data type, with higher ratios for databases than for image or audio files. Compressing data that has already been compressed can actually increase the file size, and the backup platform should be able to detect this and skip re-compression. Managing the backup lifecycle In order to properly align the cost of backup with the value of data, enterprises should ensure that less important information gets relegated to lower cost, lower performance devices. Managing information based on how important it is to a business can save money when it comes to storage and backup, whether it employs a private cloud model or offsite cloud storage. Backup Lifecycle Management (BLM) is a comprehensive 5 White Paper: A Modern Guide to Optimizing Data Backup and Recovery

6 approach used by Ace Data Abhraya Cloud Backup Vault that categorizes backup data into two different types: lyoung backup data information that a business needs to stay operational, and is critical to run an efficient business lold backup data information that no longer is needed to keep the business up and going. With new low-cost technologies for archiving data, including cloud storage, enterprises no longer need to be concerned about being unable to retrieve information from tapes or microfilm As information moves from being young to old, it can be shifted within a tiered backup system, where young and/ or high priority data is backed up on a high-performance solution. While older and/or less critical data is relegated to lower-cost and lower- performance backup systems. This is one of the most important aspects of efficiently and effectively managing backup and recovery. For highly regulated industries, such as healthcare, financial services, government or certain service professions, such as legal or accounting firms, BLM can take on a new meaning when backing data up to the cloud. Often the extra layers of legislation governing businesses in these industries change the rules for how long and where companies can back up data in the cloud. For any business, it s important to be able to define the policies governing how data is protected, at what point data becomes less operationally critical and when to automatically transfer data to a lower-cost backup system. Using this approach will decrease operating expenses and manage corporate risk by distinguishing between the performance requirements of mission-critical applications, the rapid growth of reference data, and volumes of longterm archive data. Preparing for the worst At some point, all organizations are inevitably faced with data loss, although it s rarely catastrophic. The value of your backup and recovery systems and data protection strategy should be judged on your ability to recover and restore data quickly and easily to avoid interruptions in the operation of your business. Validating backup data No solution is flawless but some measures can be taken to dramatically reduce common faults in backup and recovery. For example, enterprise data protection platforms should perform backup file validation to ensure that all the data components have arrived and have been collected in the 6

7 correct sequence before storing it in a private cloud or offsite location. Some software platforms are also able to scan the entire storage to ensure data integrity. Leading enterprise data protection platforms feature a process that checks links between the data blocks and compares digital signatures between different encrypted components for inconsistencies. When corrupted data is uncovered, it is marked as corrupted and a notification triggers the data that was marked corrupted to be re-sent. This ensures that the data is always recoverable in case of a disaster. Other specific tools that a backup and recovery platform should provide include: lability to run regular auditable recovery tests and simulations to ensure RPO and RTO can be exceeded ltiered recovery of most critical data first lability to perform automatic switchover to redundant data center with replicated data Managing backup and recovery operations Selecting the right technology platform is a critical step toward optimizing backup and recovery operations, but it s also essential to anticipate what kind of personnel resources will be required to properly manage it and be responsible for restorability when a data loss occurs. Automated processes can provide a lot of efficiency and alleviate some of the burdens of ensuring data is backed up correctly, but enterprises need to have backup systems monitored and promptly address any issues that arise. For compliance or security reasons, some enterprises mandate that these functions remain in-house. External service providers can still provide critical expertise in designing an optimal backup and recovery architecture as well as manage some aspects of non-critical backup and recovery operations. Working with a Cloud Service Provider There is a range of approaches an enterprise can use to incorporate a cloud service provider into its data protection strategy that enables it to strike the right balance between cost and data availability. lprivate cloud controlled behind an enterprise firewall, this backup architecture is owned and operated onpremise by company personnel. This architecture provides flexibility, scalability, provisioning, automation and monitoring with all of the benefits of a cloud architecture without giving up the control of maintaining your own data center. lmanaged private cloud an external service provider actively monitors and manages the private cloud architecture either remotely or on-site. lpublic cloud fully outsourcing data backup and recovery requirements to an external cloud provider with secure offsite data storage requires a lot of due diligence in the service provider and the technology platform it employs. However it frees up resources and personnel to focus on strategic projects. lhybrid cloud two or more private and public clouds that work together to enable data and application portability. This allows an enterprise to maintain control of an internally managed private cloud while relying on a secure public cloud as needed using the software platform s cloud architecture to bind the two separate cloud environments together. A hybrid approach provides the greatest amount of flexibility, leveraging a mix of local backup and also offsite protection. It also allows enterprises to architect backup and recovery solutions for specific types of data, such as those from mobile devices or remote company offices. It is critical to implement a backup and recovery technology platform that will permit future migration of data. Regardless of which cloud architecture is the best fit for an enterprise today, companies should avoid getting locked into a specific service model. Being able to seamlessly switch between public, private or hybrid cloud backup deployment models allows enterprises to optimize operating expenses and capital expenditures, while still preserving the recoverability of the existing backup of data. 7 White Paper: A Modern Guide to Optimizing Data Backup and Recovery

8 Assessing a Cloud Service Provider Cloud backup and recovery service providers can provide a wide range of support to an enterprise, but it s important to work with a service provider that has the technology and experience to adapt to new requirements as your strategy evolves. In addition to the technology platform they support, here are five other key considerations for evaluating a service provider: 1. Security: An enterprise and its service provider require airtight security in the network and infrastructure. Data should be encrypted from the moment it leaves your premises, during transmission and continue to be encrypted once stored in a cloud architecture by your service provider. Look for service providers that employ the NIST FIPS Certification for Backup and Advanced Encryption Standard (AES). 2. Compliance: A service provider should demonstrate expertise in the different regulatory requirements for data security and retention that impact your business and customers. Some service providers don t specify where your data will reside as part of their own efforts to optimize their infrastructure, but knowing where your data physically resides may be essential for compliance purposes. 3. Geography: If you require this facility, a cloud service provider should have the ability to operate at least one redundant data center in a geographic location unlikely to be affected by a common natural disaster. 4. Extent of solution: A cloud service should not only be able to protect on-site data but also accommodate distributed and mobile endpoint devices, such as laptops, smartphones and tablets with an end-to-end solution. 5. Scale: Take into account both short-term and long-term requirements. A service provider should be responsive to helping an enterprise with any adjustments it decides to make in its cloud backup and recovery architecture. 8

9 10 Deadly Sins of Backup and Recovery Regardless of your approach to data backup, you ve likely encountered the following: 1. Damaged target media, including tape and disk, which requires a costly and time-consuming data recovery service 2. Corrupted backup data 3. Human error in proper formatting of the backup medium or overwriting backup data 4. Delayed recovery process due to backup tapes or disks being stored offsite 5. Accidental deletion of a file or software bug replicated to backup due to remote mirroring 6. Unavailability of IT staff required for recovery and/or restoration 7. Impaired connectivity hampering recovery of a file from the cloud 8. Self-service interface and process for file recovery from a cloud service was too complex for most users 9. Granular file recovery was unavailable multiple files and applications or an entire snapshot had to be restored for to recover a small number of critical files 10. RTO or RPO could not be achieved Each of these all-too-common challenges need to be proactively addressed by a backup system, whether it is deployed internally or in conjunction with an external service provider. Consistently reliable and cost-effective data backup must be paired with rapid recovery and restoration at a granular level without complex administration processes or requiring technical know-how. 9 White Paper: A Modern Guide to Optimizing Data Backup and Recovery

10 Managing the service relationship External service providers can support enterprise strategies in a range of ways, but even if a company fully outsources backup and recovery, someone within the IT organization still must manage the relationship. The blueprint for this relationship is the service level agreement (SLA). These contracts need to be carefully assessed. Here are a few things to keep in mind: lhow do they define downtime? A few minutes of not being able to access data may qualify as downtime to you but not to them. lhow will they demonstrate an ability to meet RTOs and RPOs? lare RTOs and RPOs negotiable or pre-defined? lhow is non-performance on the SLA outside of a data disaster measured? lwhat specific penalties are included should the service provider fail to meet the SLA? Finally, consider whether the SLA and the cloud service technology platform provides you with an exit strategy, including the ability to migrate your data back in-house or to another service provider. Not only does it signal that the service provider is confident in its ability to perform, but it offers your enterprise greater assurance of future flexibility. The best of both worlds As the importance and value of corporate data grows, IT organizations will need to adjust by implementing and managing more sophisticated backup and recovery strategies that meet changing requirements. Service providers with deep experience in enterprise IT environments can help find solutions that will work now and evolve into the future. Regardless of what variation of public, private or hybrid cloud models is right for your organization, architecting backup and recovery on a flexible cloud-based platform, allows companies to optimize operating expenses and capital expenditures, while still preserving the recoverability of the existing backup of data. By improving data backup and recovery systems, IT organizations can achieve more effective resource allocation and reduce risks to the enterprise. The Ace Data Abhraya Advantage Ace Data Abhraya Cloud Backup Vault is powered by Awardwinning Asigra Cloud Backup. It is an agentless hardware and application agnostic backup, recovery and restore software solution that supports servers, virtual machines, desktops, laptops, tablets and smartphones enabling organizations to resume business operations quickly while optimizing costs and achieving peace of mind. Designed to offer backup efficiencies unavailable with traditional backup architecture, it allows enterprises to capture less, ingest less and store less data thus reducing the amount of backup assets you buy, manage and maintain. Ace Data Devices Private Limited is in the business of providing data storage, archival, backup and disaster recovery solutions, both cloud based and local, that are specifically suited to stringent business and enterprise environment. To seamlessly manage, protect and recover mission critical data quickly and with integrity, and help you make sense out of that data. We are today regarded as the specialists and prime suppliers of data related services and solutions in the Indian market, having almost two decades of experience. VARIED CUSTOMER BASE So instead of selling only standalone boxed hardware devices or software packages, we provide customized backup and recovery solutions to our varied clientele including Bharti AirTel, Dabur, NDTV, M3M, Apollo Hospitals, Guavas Networks, NIIT, EXL Services, Hero- Motocorp, Walmart, Dell, Indus Towers, Hughes- Escorts, Cadence, CMS, and Tata Consultancy Services, among others. PROFESSIONAL TEAM Team of dedicated and experienced professionals with in-depth knowledge of innovative techniques, and working in multi OS multi device enterprise storageenvironments. DATA CENTER AND NOC Running a fully secure Tier-3 data center equipped with world class hardware and facilities with 200 PB expandable capacity, along with a 24x7 NOC for remote monitoring of your infrastructure, Ace Data offers you a single stop shop for all your data backup, storage and disaster recovery related needs. ABHRAYA CLOUD BACKUP VAULT For more information visit or send a query to [email protected] ACE DATA DEVICES PVT LTD 678, Phase-V, Udyog Vihar, Gurgaon , India Tel.: Fax: [email protected] Facebook YouTube Linkedin