Disaster Recovery
Disaster Recovery
STORAGE
SEARCHSTORAGE.CO.UK
*essential guide
DISASTER
RECOVERY
With the technologies that
are available to help speed,
simplify and lower the
cost of disaster recovery
protection, your excuses
for not having a plan are
falling away.
inside
How to write a DR plan
Cutting DR costs with virtualisation
Cloud-based DR pros and cons
WAN optimisation opens DR doors
Best practices for small companies
editorial
* antony adshead
Technology
options are
removing
obstacles to
disaster recovery
protection
Server virtualisation and the cloud are
making the task of disaster recovery
protection considerably easier than
in the not-too-distant past and
removing excuses for not doing it.
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
the past few years. So much so that looking back to only five
years ago seems like the Dark Ages from here. It was common
to come across many businesses without disaster recovery
plans or provision. Im sure it still is, but with the mushrooming
of disaster recovery technology in the past few years, theres
no excuse nowadays.
On the one hand, there have been strong push factors
impelling organisations towards effective disaster recovery
planning.
This can take the form of legal and regulatory compliance.
Financial services players, for example, have prescribed levels
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
SearchStorage.co.UK
How to write a
disaster recovery
plan and define
disaster recovery
strategies
Learn how to develop disaster recovery strategies as well as how to write a disaster recovery
plan with these step-by-step instructions.
BY PAUL KIRVAN
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
DEVELOPING DR STRATEGIES
Regarding disaster recovery strategies, ISO/IEC 27031, the
global standard for IT disaster recovery, states, Strategies
should define the approaches to implement the required
resilience so that the principles of incident prevention, detection, response, recovery and restoration are put in place.
Strategies define what you plan to do when responding to
an incident, while plans describe how you will do it.
Once you have identified your critical systems, RTOs, RPOs,
etc, create a table, as shown below, to help you formulate the
disaster recovery strategies you will use to protect them.
Youll want to consider issues such as budgets, managements position with regard to risks, the availability of re-
browse
The state
of disaster
recovery
Writing the
DR plan
Response
strategy
Recovery
strategy
Server
failure
Secure
equipment
room and
backup
server;
install UPS
Switch over
to backup
server;
validate
that UPS
is running
Fix/replace
primary
server; fail
back to
primary
server
8/4
Loss of
manufacturing
systems
Set up
failure
alerts and
conduct
regular inspections;
install UPS
Run manufacturing
on alternate
system
Fix primary
manufacturing
system;
return to
normal
operations
2/2
Locate
Security
system in
system
destroyed secure
area; install
protective
enclosures
around
sensor
units;
install UPS
Deploy
guards at
strategic
points
Obtain/
install
replacement
unit(s),
sensor(s)
Critical
system
RTO/RPO
(in hours)
Accounts
payable
4/2
Manufacturing
Building
security
Threat
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
SearchStorage.co.UK
sources, costs versus benefits, human constraints, technological constraints and regulatory obligations.
Lets examine some additional factors in strategy definition.
People. This involves availability of staff/contractors, training
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
SearchStorage.co.UK
Response
action steps
Recovery
strategy
Recovery
action steps
Server
failure
Switch over
to backup
server;
validate
that UPS
is running
Verify server
is down;
verify data
has been
backed
up and is
safe; test
backup
server; start
switchover
to alternate
server
Fix/replace
primary
server; fail
back to
primary
server
Verify cause
of server
outage;
obtain, test
and install
new server;
fail systems
back to new
server
Manufacturing
Loss of
manufacturing systems
Run manufacturing on
alternate
system
Verify manufacturing
system is
down; verify
data has
been backed
up and is
safe; test
alternate
system;
start
switchover
to alternate
manufacturing system
Fix primary
manufacturing system;
return to
normal
operations
Verify cause
of manufacturing system outage;
contact
repair resources;
fix and test
manufacturing system;
fail manufacturing
system back
to repaired
system
Building
security
Security
system
destroyed
Deploy
guards at
strategic
points
Obtain/
install
replacement
unit(s),
sensor(s)
Verify cause
of security
system outage; contact
supplier to
get replacement; test
replacement
system;
restart
security
system
Critical
system
Threat
Accounts
payable
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
SearchStorage.co.UK
DEVELOPING DR PLANS
DR plans provide a step-by-step process for responding to a
disruptive event. Procedures should ensure an easy-to-use
and repeatable process for recovering damaged IT assets
and returning them to normal operation as quickly as possible.
If staff relocation to a third-party hot site or other alternate
space is necessary, procedures must be developed for those
activities.
When developing your IT DR plans, be sure to review the
global standards ISO/IEC 24762 for disaster recovery and
ISO/IEC 27035 (formerly ISO 18044) for incident response
activities.
INCIDENT RESPONSE
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
Disaster timeline
SMB best
practices
Incident
management
Emergency
management
Disaster
recovery
Business
continuity
Time
Note: We have included emergency management, as it represents activities that
may be needed to address situations where humans are injured or situations such
as fires that must be addressed by local fire brigades and other first responders.
10
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
11
SearchStorage.co.UK
down the plan if management determines the DR plan response is not needed.
5. Document history. A section on plan document dates
and revisions is essential and should include dates of revisions, what was revised and who approved the revisions.
This can be located at the front of the plan document.
6. Procedures. Once the plan has been launched, DR teams
browse
The state
of disaster
recovery
Writing the
DR plan
take the materials assigned to them and proceed with response and recovery activities as specified in the plans. The
more detailed the plan is, the more likely the affected IT asset will be recovered and returned to normal operation. Technology DR plans can be enhanced with relevant recovery information and procedures obtained from system vendors.
Check with your vendors while developing your DR plans to
see what they have in terms of emergency recovery documentation.
7. Appendixes. Located at the end of the plan, these can
Virtual DR
Cloud DR
FURTHER ACTIVITIES
WAN
optmisation
SMB best
practices
12
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
13
SearchStorage.co.UK
Virtual disaster
recovery
Storage and server virtualisation make
many of the most onerous disaster recovery
tasks relatively easy to execute, while
helping to cut overall DR costs.
BY LAUREN WHITEHOUSE
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
14
(DR) strategy, it might be time to start thinking virtualisation. The initial drivers behind server virtualisation adoption have been improving resource utilisation and lowering costs through consolidation, but next-wave adopters
have realised that virtualisation can also improve availability.
Virtualisation turns physical devices into sets of resource pools that are independent of the physical assets
they run on. With server virtualisation, decoupling operating systems, applications and data from specific
physical assets eliminates the economic and operational
issues of infrastructure silosone of the key ingredients
to affordable disaster recovery.
Storage virtualisation takes those very same benefits
and extends them from servers to the underlying storage
domain, bringing IT organisations one step closer to the
ideal of a virtualised IT infrastructure. By harnessing the
power of virtualisation, at both the server and storage
level, IT organisations can become more agile in disaster
recovery.
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
15
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
16
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
17
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
18
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
19
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
20
SearchStorage.co.UK
Blueprint for
cloud-based
disaster recovery
Cloud storage and computing services offer
a number of alternatives for cloud-based DR
depending on the recovery time and recovery
point objectives a company requires.
BY JACOB GSOEDL
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
21
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
And because clouds are accessed via the Internet, bandwidth requirements also need to be clearly understood.
Theres a risk of only planning for bandwidth requirements to
move data into the cloud without sufficient analysis of how
to make the data accessible when a disaster strikes. Questions to consider:
Cloud DR
WAN
optmisation
SMB best
practices
22
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
23
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
24
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
25
SearchStorage.co.UK
browse
The state
of disaster
recovery
Managed primary
and DR instances
Salesforce.com
CRM
Email in the cloud
On-premises
into the cloud
Cloud to cloud
On-premises into
the cloud
Cloud to cloud
Merits
Fully managed DR
100% usage based
Least complex
Only requires
cloud storage;
cloud virtual
machines are
optional
Usually less
complex than
replication
Best recovery
time objectives
(RTOs) and recovery point objectives (RPOs)
More likely to
support application-consistent
recovery
Caution
Less favorable
RTOs and RPOs
than replication
Higher degree
of complexity
Implemented
via . . .
N/A
Backup applications
and appliances
Replication
software
Cloud gateways
Cloud storage
software such
as EMC Atmos
and Hitachi HCP
Virtual DR
Cloud DR
WAN
optmisation
26
Replication
in the cloud
Instances
Writing the
DR plan
SMB best
practices
Cloud-based
backup and restore
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
27
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
28
SearchStorage.co.UK
Unshackling disaster
recovery with WAN
optimisation products
WAN optimisation can have a huge impact on
data movement processes, especially for disaster
recovery (DR). Learn about WAN optimisation
products specifically aimed at improving DR,
and what you need to have in place before
you deploy WAN optimisation. BY JEFF BOLES
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
29
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
30
SearchStorage.co.UK
DR over the wire, heres a short list of what you should look
for in a WAN optimisation product:
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
31
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
With your eye on this short list, you can turn to examining
the vendors on the market today, a few of which include Blue
Coat Systems, Certeon, Cisco Systems, Citrix Systems, F5
Networks, Riverbed Technology and Silver Peak Systems.
Obviously, on top of these products, you must still have
data replication, tools for coordinating what happens in the
event of a disaster and, most important of all, processes and
technologies for testing your plan and making sure your plan
stays in step with the perpetual changes occurring in any IT
environment. But with WAN optimisation in tow, you can
finally put some of those technologies to work in pursuit of
real business continuity. 2
Jeff Boles is a senior analyst and the director of Taneja Groups hands-on Technology
Validation Services, focused on validating vendor solutions in real-world use cases.
Jeffs background also includes more than 20 years of senior management and
hands-on infrastructure engineering in the trenches of operational IT.
SMB best
practices
32
SearchStorage.co.UK
SMB disaster
recovery best
practices
This technical tip outlines the essentials of
disaster recovery and business continuity
planning for SMBs. Learn about best practices
for SMB DR planning and the basic steps that
are required to put an effective disaster
recovery plan in place. BY PIERRE DORION
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
DETERMINING IMPACT
The most importantand difficultstep in disaster recovery
planning is to understand how an unplanned outage would
affect an organisation. This step is referred to as a business
impact analysis (BIA). Without the ability to determine the
impact of an unplanned outage in a meaningful way, it be33
SearchStorage.co.UK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
comes very difficult to determine the type of disaster recovery strategy is needed.
An unplanned outage refers to any unforeseen event that
interrupts normal business activity for a period of time, such
as an IT systems failure, fire, power outage or a natural disaster. Depending on the nature of the interruption, this can
cause an organisation to lose revenue, have problems with
customer satisfaction, lose opportunities or possibly go out
of business.
That impact is determined by identifying the most critical
business activities or functions, and then predicting what
would happen if those processes stopped. This is where
many inexperienced planners make a mistake: They are
tempted to skip a few steps and go to solution mode.
DR planners should not assume there is a workaround or
contingency available when a highly critical function goes
offline.
The intention is to set a recovery time objective (RTO),
which refers to how long can a process be down, and a
recovery point objective (RPO), which refers to how much
data can be lost, for critical functions and IT infrastructure.
Businesses must determine:
A financial value for a critical function, based on how
much money is lost when the revenue stream is interrupted. An
organisations accountant can usually help with this process.
1.
34
SearchStorage.co.UK
UNDERSTANDING RISK
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
35
A specific recovery strategy is determined by an organisations anticipated financial losses if critical functions are unavailable, as well as the time needed to recover necessary
applications.
An application with an RTO of within five days may do just
fine with a tape backup process, but an application that needs
to be up within an eight-hour business day might require remote data replication and/or standby IT systems at a recovery
site. Outsourcing disaster recovery is also a viable strategy:
Companies that cannot afford the cost of developing their
own recovery strategy may consider paying for DR availability
services or a DR as a service subscription.
The key is to always remember that the total cost of a recovery strategy should never exceed the losses it is designed
to prevent.
browse
The state
of disaster
recovery
Writing the
DR plan
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
36
SearchStorage.co.UK
Essential Guide to
Disaster Recovery is a
SearchStorage.Co.UK.com
e-product.
EDITORIAL DIRECTOR
Rich Castagna
UK BUREAU CHIEF
Antony Adshead
SENIOR SITE EDITOR
Sue Troy
ASSISTANT SITE EDITOR
Francesca Sales
CREATIVE DIRECTOR
Maureen Joyce
VICE PRESIDENT/GROUP PUBLISHER
browse
The state
of disaster
recovery
Writing the
DR plan
Mike Kelly
[email protected]
SENIOR VICE PRESIDENT, INTERNATIONAL
Bill Crowley
[email protected]
TechTarget
275 Grove Street, Newton, MA 02466
www.techtarget.com
Virtual DR
Cloud DR
WAN
optmisation
SMB best
practices
37
SearchStorage.co.UK