elements of business continuity

We facilitate technology transformations

that drive & support business success.

www.triella.com | 647.426.1004 | [email protected] | 1 Richmond Street West, Suite 700, Toronto, Ontario M5H 3W4 Canada

Elements of Business ContinuityHow to Protect your Firm from Disaster

Courtney Rosebush

Marketing Co-ordinator, Triella

[email protected]

Charles Bennett

Principal Consultant, Triella

[email protected]

mailto:[email protected]

mailto:[email protected]

WE FACILITATE TECHNOLOGY TRANSFORMATIONS THAT DRIVE & SUPPORT BUSINESS SUCCESS.

Agenda:

• What is Business Continuity?

• What is Disaster Recovery?

• Framework for Business Continuity Planning

• Technologies to Consider

• Demonstration of Becon Backup™

Business Continuity Planning 2November 29, 2016

= Informal Survey!


What is business continuity?

• A set of procedures and guidelines oriented around ensuring that the critical business functions can be recovered quickly.

– Resilience

– Recovery

– Contingency


BCP



What is disaster recovery?

• A subset of business continuity

– Focused on technology recovery

– What happens after a human or natural disaster

DRP


There are two classes of disasters:

• Natural Disasters • Man Made Disasters



What are the risks for downtime?


CloudEndure 2016 Survey


The numbers are compelling.

• 75% of companies have no DRP

• 90% of businesses who lose their data through a disaster close within 2 years

• 20% of companies will suffer a disaster

– 80% who experience significant data loss will be out of business in one month

– 43% of businesses who are unable to resume operations in 10 days will never reopen


From www.drbenchmark.org


What are the trends?

• Reduced use of physical servers

– Virtualization is now the standard

• Greater adoption of Private Cloud

– Get the hardware off site

• Without planning, there are unrealistic expectations for uptime and recovery



A framework is needed to start the BCP process.

• Identify Risks• Protect• Prioritize Recovery• Identify Key Staff• Testing• Recovery • Partner• Helpful Technologies


Planning

Execution




Ask questions of the business to ascertain the risks.

Identify Risks


Are You Prepared?

• Can the firm recover data?

• Are systems documented?

• Can the firm recover applications and settings?

• Are application interactions understood?

• Are people designated to run the business?

• Is there a way to communicate?

• Can clients reach you?Business Continuity Planning 11November 29, 2016


Are You Prepared?• Can staff get access to

computing resources?

• Do staff have access to what they need to work?

• Do staff have current contact lists? Clients? Internal Staff?

• Do their mobile devices work?



Are You Prepared?

• How often do you test backups?

• What is the financial cost of downtime to your business?

• Is there a fallback plan if on site backups are not working?





Does the firm have adequate protection in order to recover systems, applications and data?

Protect


Find the protection solution that is right for you.

• Backup to tape and send off site

• Backup to disk and send off site

• Replicate data off site in real time

• Backup servers to disk and have standby facilities off site

• Duplicate systems with continuous replication and two data centres


Increa

sing

cost


Plan for the recovery you need.


Seconds Minutes Hours Days WeeksSecondsMinutesHoursDaysWeeks

$

$$$$ $$$$

$

Disaster Happens

Disaster DeclaredWait time

can be hours

Recovery Point Objective

How much data can you lose?Recovery Time ObjectiveHow fast can you be up?


RPO expectations (data loss)


25%

Cloud Endure 2016 Survey


RTO expectations (system back up and running)


19%

Cloud Endure 2016 Survey


Invest in robust solutions.

• Get hardware with built in redundancy

• Then duplicate that hardware!

• Use virtualization to maximize use and facilitate recovery

• Ensure no single point of failure

– Dual ISPs

– Dual firewalls

• Take advantage of external resources



Typical backup solutions for SMB include:

• Backup Exec

• Veeam

• AppAssure

• Veritas

• Challenges are:

– Recovery

– Time spent on backup





What is most important in the recovery process? How long can you be without it? Repeat the questions iteratively!

Prioritize



How long can the business function without?

• Email

• Document processing

• Accounting

• Printing

• Phone system

• Mobile devices

• Practice specific applicationsBusiness Continuity Planning 22November 29, 2016


How long can the business function without?

• Remote access

• Office space and other offices

• People management

• Revenue collection

• Vendor involvement





Identify the right people to safeguard the DRP and protect the firm during a disaster.

Identify Key People


Key characteristics of DRP managers

• Attention to detail, methodical

• Understands the firm’s culture and decision processes

• Excellent communication skills

• Understanding of the firm’s infrastructure

• Authority to make decisions in a disaster

• Access to the firm’s decision makers



Assign people to manage the plan.

• People will need to be assigned to:

– Build the plan

– Manage and update the plan

– Test the plan

– Be able to declare a disaster

– Be key contacts and communicators during a disaster

– Monitor the recovery process with IT





Your DRP Plan must be tested regularly to ensure that it works.

Testing


Assume that testing will fail.

• The point behind testing is to discover the failure points

• Test often and then update the plan

• Small scale testing is useful too!

• Change strategies if the test dictates


Structured Walkthrough

Checklist Testing

Parallel Testing

Full Implementation

Testing




Once the disaster occurs, you need to recover quickly.

Recovery



Returning the business to normal.

• From a data perspective, this can be as big as the disaster itself

– Data is out of sync with the office

– Equipment may be new, different version

– Very expensive to test full recovery

– Partial recoveries can be tested cost effectively.





Partner with a vendor to help you put systems in place to protect the firm in the event of a disaster.

Partner



Take advantage of the expertise of partners.

• You don’t have to do it all yourself

• Find experts in the area of recovery

– They do it more often

– They know what to do when the issue strikes

– Reduces your stress

• Look for off site and on site recovery





A selection of technologies used by Triella and its clients to assist with recovery.

Helpful Technologies



BCP: Backup and Recovery

• We partner with Datto for a Hybrid Cloud solution we call Becon Backup™



Case Studies

• CryptoLocker Virus

– 110 Users, 19 Servers, 2TB data

– Recovery time 4 days

• Dual Drive Failure on SAN

– 50 users, 12 Servers, 4TB data

– Recovery time 1.5 days

• Server Failure in Halifax

– 33 users, 2 servers, 1.5TB data

– Recovery time 4 hoursBusiness Continuity Planning 35November 29, 2016

Old School

Backup

Becon

Backup™


Comparing typical backup systems.Traditional

• Recovery can take days or weeks.

• Manual intervention is required.

• Backup not typically tested.

• Data typically either local or in the Cloud.

• Typically run once a day.

Becon Backup™

• Recovery can take minutes to hours.

• No manual intervention required. Less errors.

• Backup verified and tested every time.

• Data is local AND in the Cloud.

• Can run many times a day.



Traditional

• Backups need to be adjusted to be bootable.

• Data may not be encrypted on site or in the Cloud.

• Recovery may or may not work due to lack of testing.

• Potential for loss of media in transit.

Becon Backup™

• Backups are boot ready for immediate use.

• Data can optionally be AES 256 encrypted on site and off site.

• Since each backup is tested, recovery has very low risk of failure.

• No media used so it’s not possible to lose it.


Comparing typical backup systems.


BCP: Email Continuity

• We partner with Mimecast using their Ireland data centres

• Email continuity takes over if your email goes down

– Supports Exchange servers

– Supports Office 365

• Provides spam and virus protection



BCP: Antimalware

• We are considering partnering with Webroot for Cloud based malware endpoint protection

– Runs with existing antivirus solutions

– No need to reimage on infection; can roll back

– Cloud based management protects machine inside and outside the network

– Behaviour monitoring, not signature files





Demonstration of Becon Backup™Powered by Datto

http://www.google.ca/url?sa=i&rct=j&q=&esrc=s&frm=1&source=images&cd=&cad=rja&uact=8&ved=0CAcQjRw&url=http://www.shacktech.co.uk/products/datto-business-continuity.html&ei=7xezVI-lM4qlNtCig6gC&bvm=bv.83339334,d.eXY&psig=AFQjCNHOKAOH0Pel0oPIo7_yN7qxtLYKJg&ust=1421109401841624


Recap of the BeconBackup™ benefits.

• Hands off

• Multiple backups a day minimizes data loss

• Backup notification and monitoring

• Backs up physical and virtual servers

• Entire server backed up

• Backups are tested each time

• Recovery is fast

• Recover onto device

• Recover servers in the Canadian Cloud




Experience Becon Backup™real time, on your system

30 day evaluation availableto all attendees


Resources

• www.drbenchmark.org– Disaster Recovery Preparedness Benchmark Survey

(2014)

• http://www.drj.com/resources/forrester-surveys.html– The state of business continuity preparedness (2015)

• http://info.cloudendure.com/rs/094-DCS-290/images/2016%20Disaster%20Recovery%20Survey.pdf– Disaster Recovery Survey (2016)


http://www.drbenchmark.org/

http://www.drj.com/resources/forrester-surveys.html

http://info.cloudendure.com/rs/094-DCS-290/images/2016 Disaster Recovery Survey.pdf


Questions?

• Thank you for your time

• Presentation is available on the TLOMA and Triella web sites

• Contact us at 647.426.1004 x 222 or [email protected]


elements of business continuity

Documents