disaster recovery — modernized best practices for jd edwards & beyond

42
QuestDirect. org Disaster Recovery— Modernized Best Practices for JD Edwards & Beyond Presented by Andy Chase & Paul Shearer December 4, 2013

Upload: vienna

Post on 25-Feb-2016

28 views

Category:

Documents


1 download

DESCRIPTION

Disaster Recovery — Modernized Best Practices for JD Edwards & Beyond. Presented by Andy Chase & Paul Shearer December 4, 2013. Introduction to Paul Shearer. Solution Architect 15 years JD Edwards experience Managed E1 Practice for Fortune 50 company - PowerPoint PPT Presentation

TRANSCRIPT

Page 1: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Disaster Recovery—Modernized Best Practices for JD Edwards & Beyond

Presented by Andy Chase & Paul ShearerDecember 4, 2013

Page 2: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Introduction to Paul Shearer

• Solution Architect• 15 years JD Edwards experience• Managed E1 Practice for Fortune 50 company• Designed & Implemented HA solutions for

multiple clients• Designed and implementation of DR solutions

for multiple clients• Successfully completed multiple E1 upgrade

projects• Recovered 12 customers in DR exercises• Published two technical whitepapers with

Microsoft on ERP virtualization and Platform conversions

Page 3: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Introduction to Andy Chase

• Disaster Recovery AE & SME

• Began disaster recovery career at the age of 13 and has worked with over 100 companies since 2001 to improve their recovery capabilities

Page 4: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

What constitutes a disaster?

hurricanetornado

tsunami

earthquake

severe weather

power outage

IT failure

epidemic/pandemic

telecommunications failure

fire

flood

cyber attack

utility outage

health & safety incident

environmental accidenthaz mat explosion

supply chain disruption

terrorist event

sabotage

Page 5: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

What constitutes a disaster?

hurricanetornado

tsunami

earthquake

severe weather

power outage

IT failure

epidemic/pandemic

telecommunications failure

fire

flood

cyber attack

utility outage

health & safety incident

environmental accidenthaz mat explosion

supply chain disruption

terrorist event

sabotage

Page 6: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Rec

over

y P

oint

Obj

ectiv

e (R

PO

)

Recovery Time Objective (RTO)

Most Disaster Recovery Discussions Begin Here

Tape Backup

Minutes

Days

Seconds

Tape Backup

How much data can you afford to lose?

How much downtime can you afford to have?

Weeks

Page 7: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Rec

over

y P

oint

Obj

ectiv

e (R

PO

)

Recovery Time Objective (RTO)

Data Vaulting

Minutes

Seconds How much data can you afford to lose?

Most Disaster Recovery Discussions Begin Here

Days

Weeks

NO DR

RPO: ?RTO: ?

How much downtime can you afford to have?

Page 8: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Rec

over

y P

oint

Obj

ectiv

e (R

PO

)

Recovery Time Objective (RTO)

Data Vaulting

Minutes

Seconds How much data can you afford to lose?

Most Disaster Recovery Discussions Begin Here

Days

Weeks

Tape Backup

RPO: 24 hoursRTO: 48 hours

NO DR

RPO: ?RTO: ?

How much downtime can you afford to have?

Page 9: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Rec

over

y P

oint

Obj

ectiv

e (R

PO

)

Recovery Time Objective (RTO)

Data Vaulting

Minutes

Seconds How much data can you afford to lose?

Most Disaster Recovery Discussions Begin Here

Days

Weeks

ElectronicBackup

RPO: 24 hoursRTO: 24 hours

Tape Backup

RPO: 24 hoursRTO: 48 hours

NO DR

RPO: ?RTO: ?

How much downtime can you afford to have?

Page 10: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Rec

over

y P

oint

Obj

ectiv

e (R

PO

)

Recovery Time Objective (RTO)

Data Vaulting

Minutes

Seconds How much data can you afford to lose?

Most Disaster Recovery Discussions Begin Here

Days

Weeks

ElectronicBackup

RPO: 24 hoursRTO: 24 hours

Transaction Vaulting

RPO: 60 minutesRTO: <= 12 hours

Tape Backup

RPO: 24 hoursRTO: 48 hours

NO DR

RPO: ?RTO: ?

How much downtime can you afford to have?

Page 11: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Rec

over

y P

oint

Obj

ectiv

e (R

PO

)

Recovery Time Objective (RTO)

Data Vaulting

Minutes

Seconds How much data can you afford to lose?

Most Disaster Recovery Discussions Begin Here

Days

Weeks

ElectronicBackup

RPO: 24 hoursRTO: 24 hours

TransactionVaulting

RPO: 60 minutesRTO: <= 12 hours

High Availability

RPO: last successful transactionRTO: <= 2 hours

Tape Backup

RPO: 24 hoursRTO: 48 hours

NO DR

RPO: ?RTO: ?

How much downtime can you afford to have?

Page 12: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Rec

over

y P

oint

Obj

ectiv

e (R

PO

)

Recovery Time Objective (RTO)

Data Vaulting

Minutes

Seconds How much data can you afford to lose?

Most Disaster Recovery Discussions Begin Here

Days

Weeks

ElectronicBackup

RPO: 24 hoursRTO: 24 hours

Transaction Vaulting

RPO: 60 minutesRTO: <= 12 hours

High Availability

RPO: last successful transactionRTO: <= 2 hours

Tape Backup

RPO: 24 hoursRTO: 48 hours

NO DR

RPO: ?RTO: ?

This is inherently broken!

How much downtime can you afford to have?

Page 13: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Disaster Recovery “Benchmark” Data

• 10* Volunteers & 2 Questions

• Out of one thousand attendees at Collaborate, if the Keynote speaker asked…

1. How many organizations have already invested in disaster recovery software, infrastructure or services?

2. What percentage of you are completely confident that your team could recover those applications & data in the event of a disaster?

Page 14: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

8% OF FEDERAL IT EXECUTIVES ARE COMPLETELY CONFIDENT THAT THEIR AGENCY COULD RECOVER 100 PERCENT OF ITS DATA IN THE

EVENT OF A DISASTER

You are not alone…

Page 15: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

72% OF RECENTLY SURVEYED ENTERPRISES WERE GIVEN EITHER A D OR AN F FOR THEIR DR CAPABILITIES.

You are not alone…

Page 16: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

93% OF BUSINESSES THAT SUFFER A SIGNIFICANT LOSS OF DATA ARE OUT OF BUSINESS WITHIN 5 YEARS.

You are not alone…

Page 17: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

43% OF COMPANIES THAT SUFFER MAJOR DATA LOSS NEVER REOPEN FOR BUSINESS.

You are not alone…

Page 18: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

“If I were a CIO…”

– “I would tear up my DR plan & cease spending on DR completely.”

– Why invest toward something that only works 10-27% of the time?

» Better odds in Vegas!

Page 19: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

What do these numbers reveal about DR?

and Proven Recoverability.

There is a GAP between Disaster Recovery

Page 20: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Why the gap?

• “DR Team” already has full-time job– Production support always trumps DR– There will always be production issues to resolve

• Lack of executive sponsorship• Lack of testing

– Testing is not practical– Business can’t or won’t engage

• Testing not complete• Too much time since last test

– Plan not up to date– Too many changes to Production

• Not a business priority– Not perceived as important

• Lack of skills, understanding, funding, etc.• Uncertainty of staff availability in actual regional disaster event

Page 21: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Rec

over

y P

oint

Obj

ectiv

e (R

PO

)

Recovery Time Objective (RTO)

Data Vaulting

Minutes

Seconds How much data can you afford to lose?

Why are most DR discussion inherently broken?

Days

Weeks

ElectronicBackup

RPO: 24 hoursRTO: 24 hours

Transaction Vaulting

RPO: 60 minutesRTO: <= 12 hours

High Availability

RPO: last successful transactionRTO: <= 2 hours

Tape Backup

RPO: 24 hoursRTO: 48 hours

NO DR

RPO: ?RTO: ?

How much downtime can you afford to have?

They Assume Recoverability!

Page 22: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

How can we permanently change the way our organization approaches disaster recovery?

1. Scratch out Disaster Recovery, write Recoverability

– Disaster Recovery Recoverability Plan– Disaster Recovery Recoverability Spending– Disaster Recovery Recoverability Solution– Disaster Recovery Recoverability Projects

Page 23: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

How can we permanently change the way our organization approaches disaster recovery?

1. Scratch out Disaster Recovery, write Recoverability2. Define Recoverability

Page 24: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

The Velocity definition of Recoverability

The Power to Recover Your Business Applications & Data

Page 25: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

How can we permanently change the way our organization approaches disaster recovery?

1. Scratch out Disaster Recovery, write Recoverability2. Define Recoverability3. Does Recoverability Matter?

Page 26: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

• Jewelry maker hasn’t tested DR in almost 5 years– 3rd party DR contract $50k/year– $250k spent without a Recoverability ROI

• University cancels annual DR Test due to budget cuts– Test estimated to cost $10k T&E– 3rd party DR contract over $130,000/year

• Many companies place old infrastructure in DR facility– “The business will understand if we have a disaster”

• Will they? For some, maybe yes. • Boston CIO blog after terrorist attack

– Communications Provider learns from Boston CIO

Does Recoverability Matter?

Page 27: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Does Recoverability Matter?

• Most would say yes, but results reveal otherwise…

(GAP between Disaster Recovery & Recoverability is not new)

• Did you know?– SOX, HIPAA, PCI, FERPA do not require Recoverability

(at least Not Yet)– The Disaster Recovery Check Box vs. Proven Recoverability– How many CXOs are aware that their companies compliance with SOX,

HIPPA, etc does not actually mean they are Recoverable?

Page 28: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

When does Recoverability matter?

• Dallas construction materials company• No DR, tape backups only, JDE & WMS highly integrated• 3 locations:

– Dallas HQs, Call Center, Distribution & Data Center– California Distribution Center– Maryland Distribution Center

• CFO requests 3 site real-time replication

What changed? • CEO finally cares about Recoverability after capturing cell

phone camera footage of tornado forming across parking lot!

Page 29: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

When does Recoverability matter?

• Northeast retail chain• Internal DR @ secondary site, using Mimix HA• Company funded & implemented DR several years ago• Everything is current, tested & documented• CIO now wants to outsource DR to the Cloud

What changed?• DR facility too close, told by insurance provider they

will lose coverage if they don’t move DR site outside region

Page 30: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

How can we permanently change the way our organization approaches disaster recovery?

1. Scratch out Disaster Recovery, write Recoverability2. Define Recoverability3. Does Recoverability Matter?4. What would it take to Prove Recoverability?

Page 31: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

What would it take to be completely confident that you

could recover all your applications & data in the event of a disaster?

Page 32: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

What would it take to Prove Recoverability?

1) Plan it – Define all components required (create a matrix)2) Build it – Implement all the pieces to the puzzle3) Test it – Keep testing all pieces until you get it right4) Prove it – Testing that includes business users & processes5) Maintain it – Keep yourself Recoverable at ALL times6) Guard it – Eliminate every potential single point of failure

The goal is for everyone in your business to be completely confident you are

Recoverable!

Page 33: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

How can we permanently change the way our organization approaches disaster recovery?

1. Scratch out Disaster Recovery, write Recoverability2. Define Recoverability3. Does Recoverability Matter?4. What would it take to Prove Recoverability?5. Eliminate single points of failure

Page 34: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Single Points of Failure in Disaster Recovery

• Not enough DR capacity to run Production• Recovery facility in same FEMA region• Recovery team in same region as Production• Production team responsible for recovery• Recovery depends on “one” person• DR “team” lacks application expertise

JD Edwards/Technical Application Expertise E1, Dev, Web, JAS, 3rd party tools, etc

• Out of date recovery plan, untested plan• Incomplete testing, unsuccessful or infrequent testing• DR is an IT exercise rather than Business Process Validation

Page 35: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

DR is not that hard…

• Billy Beane: We want you at first base.• Scott Hatteberg: But, I've always played catcher.• Billy Beane: It's not that hard, Scott. tell him, Wash.• Ron Washington: It's Incredibly hard.

Page 36: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Think, Invest & Make Decisions toward Recoverability

Disaster Recovery vs. Proven Recoverability

(not toward disaster recovery, where there is no assurance)

Page 37: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

How can we permanently change the way our organization approaches disaster recovery?

1. Scratch out Disaster Recovery, write Recoverability2. Define Recoverability3. Does Recoverability Matter?4. What would it take to Prove Recoverability?5. Eliminate single points of failure

Think, Invest & Make Decisions toward Recoverability (not toward disaster recovery, where there is no assurance)

Page 38: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Rec

over

y P

oint

Obj

ectiv

e (R

PO

)

Recovery Time Objective (RTO)

Common Disaster Recovery Configurations

No DR

ElectronicBackup

RPO: 24 hoursRTO: 24 hours

Data Vaulting

RPO: 60 minutesRTO: <= 12 hours

High Availability

RPO: last successful transactionRTO: <= 2 hours

Minutes

Seconds

Days

Weeks

Tape Backup

RPO: 24 hoursRTO: 48 hours

NO DR

RPO: ?RTO: ?

How much data can you afford to lose?

How much downtime can you afford to have?

Page 39: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Key Takeaways from Today

Page 40: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

How do we embed Recoverability into our organization’s culture?

Key Takeaways from Today

Page 41: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

Get your life back.

Control your Business.

No boundaries.

Go when you’re ready.

One size does not fit all.

Questions?

VELOCITY TECHNOLOGY SOLUTIONS

Page 42: Disaster Recovery — Modernized  Best Practices  for  JD Edwards & Beyond

QuestDirect.org

April 7-11, 2014The Venetian and Sands Expo CenterLas Vegas, Nevada

QuestDirect.org/COLLABORATE

Attend COLLABORATE 14 to hear high-level, strategic education for the JD Edwards audience. Register through Quest to receive exclusive JD

Edwards updates, materials and networking events.

Registration OPEN! Early Bird rates end February 12, 2014.