• Follow us

Internet

Nine steps to building a business-oriented disaster recovery plan

Although IT disasters are unpredictable, data recovery shouldn’t be. In fact, recovery should be planned, predictable and controlled. The following steps will help you organise your thoughts, ask the right questions and develop a strategy for your DR plan that is closely aligned with your business.

 1. Conduct an asset inventory 

Disaster recovery planning should always start with an inventory of all your IT assets. This step is necessary to untangle the complexity of your environment. Start by listing all the assets under IT management, including all servers, storage devices, applications, data, network switches, access points and network appliances. Then map where each asset is physically located, which network it is on, and identify any dependencies.

 2. Perform a risk assessment 

Once you have mapped out all your IT assets, networks and their dependencies, list the potential internal and external threats to each of those assets. Imagine the worst-case scenario — and be thorough. Threats could include natural disasters or mundane IT failures.

Next, include the probability of each happening and the impact it could have. How would it affect the business if each scenario were to occur? Enlist the help of your business colleagues for this exercise — but be sure to emphasise that mundane events happen much more frequently than natural disasters. Move the conversation away from earthquakes and hurricanes and toward higher probability events such as power outages or IT hardware failures.

 3.Define criticality of applications and data 

Before you begin to build out your business-oriented DR plan, you’ll need to classify your data and applications according to how critical they are to the business. Start by speaking to your business colleagues and support staff.

Look for commonalities and group them according to how important each is to the business, frequency of change and retention policy. You do not want to apply a different DR technique to every application or dataset you have. Grouping assets with similar characteristics will allow you to implement a less complex strategy.

Classifying data in a vacuum based on assumptions could come back to haunt you. Be sure to involve other business managers and support staff in this exercise. You will undoubtedly have to make some trade-offs to limit the number of data classes you have. For medium-sized businesses, the number of classes should likely be between three and five.

 4. Define recovery objectives 

Different classes of assets and data will have different recovery objectives. For instance, a critical e-commerce database may have very aggressive recovery objectives because the business simply can’t afford to lose any transactions or be down for long. On the other hand, a legacy internal system may have less stringent recovery objectives because the data involved doesn’t change very often and it’s less critical to get back online.

Many IT pros fall short when it comes to this step. Setting recovery objectives without consulting the business line managers is the No. 1 cause for misalignment. It’s imperative that you involve them in this process. The key here is to ask specific questions of key stakeholders, to understand business needs and provide a differentiated level of service availability based on business priority. Once you have that information in hand, it needs to be translated into recovery objectives to be included in your DR plan.

Recovery Time Objective (RTO) refers to the acceptable time any of your data and production systems can be unavailable. To calculate the RTO for an application, consider how much revenue your organisation would lose if the application went down for a given length of time. For example, how much would you lose if your customer portal went down for an hour or a day? How much cost would be incurred if none of your employees can work because email is down?

Calculating your RTO is necessary to determine the features you need in your backup systems and products. For example, if you have a very high RTO (say, more than four hours), you will probably have time to back up from tape, but if you have a very low RTO (such as just a few minutes), you need to use host-based replication or disk-based backup with continuous data protection features.

What is the acceptable amount of data your organisation can afford to lose? That is your Recovery Point Objective (RPO). If your organisation has a high tolerance for data loss, your RPO can be high, from hours to days. If your business can’t afford to lose any data, or very little, your RPO will be seconds. The RPO you set will determine the minimum frequency for backing up your data. If you can only afford to lose an hour’s worth of data, you should back up the data at least every hour. That way, if an outage begins, for example, at 2:30 p.m., you can retrieve the 2 p.m. backup and meet the RPO requirement.

The good news is that numerous disaster recovery solutions are on the market today. Just make sure that what you choose offers the appropriate level of protection. Over-protection can cost the company needless money and introduce unnecessary complexity. Under-protection is obviously bad because it puts important business functions at risk.

For instance, nightly backups using traditional (file-based) methods are more than sufficient for low-impact data, but this method would be inappropriate for high-impact data and applications. A continuous data protection (CDP) solution is great for high-impact data and systems, but it can add overhead to production servers and storage costs.

Perhaps the most critical component of your DR plan is offsite protection — use it regardless of the type of backup method you choose. Offsite protection (be it a tape vaulting service or replication to the cloud) should be commensurate to your recovery objectives. Make sure your data is sent to a location that is far enough away that it is not in the same geographic risk zone. Typically, this is at least 25 miles away from the primary location.

Finally, automate and streamline the recovery process as much as you can. In the event of a disaster, key IT staff may be unavailable. Automation also lessens the risk of human error.

 6. Get stakeholder buy-in 

Go beyond the walls of the datacentre and involve key stakeholders for all your business units. They need to be involved in the planning phase, and they should agree with you on the company’s priorities as well as the service-level agreements (SLAs) your team will provide.

Also, consult your strategic partners and vendors to make sure you’re getting the most out of your DR solution or services. Once you have consulted all of the key stakeholders, enlist an executive-level sponsor who will get behind you and the project. The importance of collaboration, consensus and executive support to your DR plan’s success cannot be emphasised enough.

 7. Document and communicate your plan 

In a disaster scenario, you need a documented strategy for how to get back to a working state. This document should be written for the people who will use it.

Importantly however, this documented plan must be communicated. All too often, only one person in the organisation really knows the whole picture, leaving the organisation vulnerable if that one person is unavailable during a disaster. In addition, be sure to store your recovery strategy where it can be accessed during a disaster — not on a public share in your Exchange folders. Ideally, it should be printed and posted in multiple locations.

 8. Test and practice your DR plan 

People often say, “Practice makes perfect.” A better saying might be, “Practice makes progress.” No organisation ever gets to perfection with its DR plan, but practice will help you find and rectify problems in your plan, as well as enable you to execute it faster and more accurately. Make sure that everyone who has a role to play attends the practice sessions, although you do not need to practice executing the full disaster recovery plan every time. It’s perfectly acceptable to carve out pieces of your plan to test.

 9. Evaluate and update your plan 

A DR plan should be a living document. It’s especially important to regularly review your plan given the shifting sands of an ever-changing business environment. Tolerance for downtime and data loss may decline, and key personnel may go on leave or terminate their employment. IT might migrate to new hardware or operating systems or the company might acquire another company. As your organisation is dynamic and ever changing, your plan needs to reflect the current state of the organisation, whatever that may be.

Adrian Moir, senior consultant, product management, QuestImage Credit: alphaspirit / Shutterstock

Read More



Leave A Comment

More News

Latest ITProPortal news

5G and 4IR has unleashed the Internet of 2019-02-19 06:00:58The rapid growth of the IoT and its need for reliable, ubiquitous connectivity represents a significant opportunity for telcos.

Huawei: US will not crush us 2019-02-19 06:00:54US is only a part of the world, defiant company founder says.

A guide to protecting AI and machine learning 2019-02-19 05:30:32Without patent or other intellectual property protection, innovators may be unable to commercialise their inventions, which could undermine investment

The state of the connected world and the 2019-02-19 05:00:13Now more than ever manufacturers need to take measures to ensure that sufficient interoperability, privacy and security is in place to find continued

Strategies for securing container deployments 2019-02-19 04:30:15Organisations hesitant to adopt containers are often wary of the challenges of securing containers in production.

Hackers are successful for the same old reasons 2019-02-19 04:00:44While the specific modes of attack and popular hacks may change, the reasons why they succeed have remained largely static.

What is 5G? Everything you need to know 2019-02-18 10:36:435G: What's new 18/02 - NEWS - UK doesn't need to ban Huawei from its 5G - Any potential risk can be mitigated, NCSC claims

Australia government hit by major cyberattack 2019-02-18 07:30:53Behind this 'unprecedented' attack is a state actor, the government claims.

Vodafone switches on UK's first 5G airport 2019-02-18 07:00:37Superfast network could let travellers download a full TV series in six minutes.

UK doesn't need to ban Huawei from its 2019-02-18 06:30:52Any potential risk can be mitigated, NCSC claims.

Facebook heavily criticised by UK parliament report 2019-02-18 06:00:59Social media giant labeled as "digital gangster".

Before the breach: Five tips for upgrading data 2019-02-18 06:00:48By implementing five steps, you not only can help prevent a data breach from happening in the first place, but better protect your data if you are one

TechRadar: Internet news

Samsung Galaxy S10 Plus release date, price, news New! 2019-02-20 04:58:10The Samsung Galaxy S10 Plus launch date is today. Here's what we know about it.

Samsung Galaxy S10 release date, price, news and New! 2019-02-20 04:52:10The Samsung Galaxy S10 launch event is today and there is plenty of information on what you can expect.

If you miss this vital Windows 7 patch New! 2019-02-20 04:45:15Microsoft is transitioning to a more secure method of delivering updates, and your PC needs to be ready.

AI-powered LG Q60, LG K50 and LG K40 New! 2019-02-20 04:32:57LG has announced three new mid-range phones with a lot of cameras and AI skills.

Rocket your business skyward in 2019 with these New! 2019-02-20 04:29:31A list of some top tools you may want to use for your business online.

Nokia True Wireless Earbuds launched in India at New! 2019-02-20 04:21:31The wireless earbuds provide up to four hours of playback or talktime and connects to the smartphone via Bluetooth 5.0.

Valve shutters Steam's video marketplace New! 2019-02-20 04:03:00Valve hopes to 'focus' on Steam's core gaming functions, no doubt with an eye on the competition.

PUBG Mobile zombie mode gameplay: Tips and tricks New! 2019-02-20 02:42:51PUBG Mobile 0.11.0 update went live with a special event mode, Zombie: Survive Till Dawn. Here's how to play it.

Google announces plans to acquire Alooma New! 2019-02-19 19:56:16Google has announced that it will acquire Alooma as it looks to ramp up competition against its rivals in the cloud space.

Canceled Xbox game Scalebound could be Switch-bound, according New! 2019-02-19 19:50:58Platinum Games' Scalebound may have found itself a new home on Nintendo Switch.

Apple revives Group FaceTime calls in upcoming iOS New! 2019-02-19 19:19:49Apple has publicly released iOS 12.2 beta 3 with a few more design changes and Group FaceTime calls back in action.

Samsung Galaxy S10e pre-orders: what should you expect New! 2019-02-19 19:18:26Samsung's Galaxy S10e is supposedly its more affordable offering, but what price bracket will that put it in?

TechCrunch » Enterprise

As GE and Amazon move on, Google expands 2019-02-15 13:06:48NYC and Boston were handed huge setbacks this week when Amazon and GE decided to bail on their commitments to build headquarters in the respectiv

Zendesk just hired three former Microsoft, Salesforce and 2019-02-14 17:19:22Today, Zendesk announced it has hired three new executives — Elisabeth Zornes, former general manager of global support for Microsoft Office, as

Peltarion raises $20M for its AI platform 2019-02-14 14:46:30Peltarion, a Swedish startup founded by former execs from companies like Spotify, Skype, King, TrueCaller and Google, today announced that it has rais

AWS announces new bare metal instances for companies 2019-02-14 10:42:36When you think about Infrastructure as a Service, you typically pay for a virtual machine that resides in a multi-tenant environment. That means, it&r

Zoho’s office suite gets smarter 2019-02-14 09:00:17As far as big tech companies go, Zoho is a bit different. Not only has it never taken any venture funding, it also offers more than 40 products that r

Google says it’ll invest $13B in US data 2019-02-13 13:39:30Google today announced that it will invest $13 billion in data centers and offices across the U.S. in 2019. That’s up from $9 billion in investm

Block Kit helps deliver more visually appealing content 2019-02-13 11:03:20Slack has become a critical communications tool for many organizations. One of the things that has driven its rapid success has been the ability to co

Fiverr acquires ClearVoice to double down on content 2019-02-13 08:00:50Fiverr is acquiring ClearVoice, a company that helps customers like Intuit and Carfax find professionals to write promotional content. The two compani

Google and IBM still trying desperately to move 2019-02-12 17:14:57When it comes to the cloud market, there are few known knowns. For instance, we know that AWS is the market leader with around 32 percent of market sh

Donde Search picks up $6.5 million to help 2019-02-12 17:00:23Donde Search has just closed a $6.5 million Series A investment led by Matrix Partners, with participation from previous investors such as senior lead

Glide helps you build mobile apps from a 2019-02-12 11:10:51The founders of Glide, a member of the Y Combinator Winter 2019 class, had a notion that building mobile apps in the enterprise was too hard. They dec

Datadog acquires app testing company Madumbo 2019-02-12 10:00:26Datadog, the popular monitoring and analytics platform, today announced that it has acquired Madumbo, an AI-based application testing platform. &ldquo


Disclaimer and Notice:WorldProNews.com is not responsible of these news or any information published on this website.