1. John Graham – STRATEGIC Information Group Steve Lamb - QAD Disaster Recovery Planning MMUG Spring 2013 March 19, 2013 Cleveland, OH 03/19/2013MMUG Cleveland OH

2. Menu Statistics Definitions Example high level tasks Questions

3. Shocking Statistics 43% of companies experiencing disasters never re-open. 29% close within two years. Source - McGladrey and Pullen

4. More Statistics 93% of businesses that lost their data center for 10 days went bankrupt within one year. Source - National Archives & Records Administration

5. Shocking Statistics 40% of all companies that experience a major disaster will go out of business if they cannot gain access to their data within 24 hours. Source - Gartner

6. Definitions Business Continuity Disaster Recovery Business Recovery High Availability Redundancy ColdSite WarmSite HotSite Mission Critical RPO RTO

7. Business Continuity (BC): Planning to ensure the continuity of business critical functions in the event of a major unplanned service failure or disaster Includes key aspects such as personnel, facilities, crisis communication, project management and change control. A BC strategy includes a Disaster Recovery Plan (DRP) for IT related infrastructure recovery. An all encompassing term covering both disaster recovery planning and business resumption planning

8. Disaster Recovery (DR): Part of a larger Business Continuity plan that includes processes and solutions to restore business critical applications, data, hardware, communications (such as networking) and other IT infrastructure. Can also include measures to protect against other unplanned events such as the failure of an individual server or shorter service interruptions

9. Business Recovery The common critical path that all companies follow during a recovery effort. There are major nodes along the path which are followed regardless of the organization. The process includes: – Immediate response, – Environmental restoration or relocation – Functional restoration – Data recovery and synchronization – Restore business functions – Return to normal

10. High Availability (HA): A system or component that is continuously operational for a desirably long length of time. Usually includes redundant local systems

11. Redundancy Systematically using multiple sources, devices or connections to eliminate single points of failure that could completely stop the flow of information.

12. Mission Critical Systems Systems or applications that are essential to the functioning of your business and its processes.

13. Recovery Point Objective (RPO): The age of files that must be recovered for normal operations to resume if a system goes down as a result of a failure.

14. Recovery Time Objective (RTO): The maximum tolerable length of time that a computer, system, network or application can be down after a failure or disaster occurs.

15. Coldsite An alternate facility that is void of any resources or equipment except air- conditioning, raised flooring and power. Equipment and resources must be installed in such a facility to duplicate the critical business functions of an organization.

16. Warmsite An alternate processing site which is only partially equipped As compared to Hot Site which is fully equipped

17. Hotsite A DR facility fully equipped with the equipment, network connections and environmental conditions necessary for restoring your data and getting your systems up and running instantly. unlike coldsites and warmsites, which are not ready to go in an instant

18. Availability vs. DR There's a huge difference between disaster prevention (Availability) and disaster recovery. Both are necessary. But the former only mitigates the risk of downtime. The latter ensures quick recovery in the event of downtime.

19. High Availability DATA CENTER LEVEL Utility Power and UPS Generator Core Networking Security HVAC Fire Prevention Monitoring CONFIGURATION LEVEL Power Network Devices Security Devices Server Clustering Storage Encryption & Policies

20. DISASTER RECOVERY Backup & Retention Data Replication Application Recovery Server Recovery DR Assessment DR Plan Testing

21. High Level Tasks Perform Needs Analysis/Discovery Identify Requirements Based on Analysis Identify Recovery Time Objectives Identify Recovery Point Objectives Perform Initial Design Review Initial Design Implement Design Test Plan

22. Identify Requirements Based on Analysis Facilities Hardware System / Applications

23. Identify Recovery Time Objectives Per System / Application

24. Identify Recovery Point Objectives Per System / Application

25. Example RTO/RPO Analysis Mission Critical Systems ApplicationPreferred RTOPreferred RPOCompromised RTO Compromised RPO QAD408Last Backup Gentran408Last Backup Active Directory 408Last Backup Exchange408Last Backup

26. Initial Design Identify disaster recovery project members Perform Risk Analysis Define high-level recovery strategy Define costs associated with strategy

27. Review Initial Design Justify costs to risk analysis

28. Detailed Design Architect systems & recovery. Create detailed project plan.

29. Implement Design Procure facilities, equipment, and software. Build recovery site.

30. Test Plan

31. Summary Potential ramifications of a disaster without a plan Definitions of a few important terms Key tasks to develop and implement a plan

32. Questions