Archive for the ‘Disaster Recovery’ Category

Recommended considerations for selecting an Alternate Recovery Site

Friday, February 26th, 2010

Do you need to select an alternate recovery site for your business continuity or IT disaster recovery?

In the event of a disaster, it is crucial that your organisation can transition as smoothly as possible into a recovery site and commence working on critical business processes as quickly as possible.  Ensuring that an appropriate alternate recovery site has been selected is key to this smooth transition.

OpsCentre has released a succinct 2 page guide to considerations for selecting the right recovery site.

The report covers aspect such as:

  1. Location of the recovery site
  2. A list of must-have pre-requisites that every recovery site should have
  3. Site Security
  4. Technical Infrastructure considerations
  5. Other site characteristics to be considered

Go HERE to request your copy of the COMPLIMENTARY, OBLIGATION-FREE Alternate Site Selection Report.

Have you outgrown your paper-based business continuity and disaster recovery plans?

Monday, February 22nd, 2010

Your organisation has changed and you are finding that the current “paper-based” planning methodology no longer is fit for purpose. 

If you recognise any of the following items familiar, it may be time to invest in a business continuity software planning solution:

 1.       Are your plans hard to maintain and have numerous areas for updates?

2.       Would the volume of updates and changes be better suited to the functionality of a relational database?

3.       Does your organisation have numerous Business Continuity and Disaster Recovery stakeholders that are required to provide input and updates to the plans?

4.       Is the import of your Business Impact Analysis (BIA) information a manual process taking significant time and effort to complete?

5.       Is it difficult to provide granular reporting to Senior Management and auditors?

6.       Is additional plan security required?

7.       Are some sections of the plans “off limits” to certain groups or business units?

8.       Is Business Continuity/Disaster Recovery exercising and training difficult to organise and complete?

9.       Does your current plan require greater geographical coverage for your branch offices?

10.   Are updates completed in a scheduled manner (or 1 week prior to an audit or test)?

If you answered “Yes” to any of these questions, odds are that a more sophisticated Business Continuity/Disaster Recovery planning tool may be of use to the maintenance and health of your management program.

The best part is that this is not a “throw the baby out with the bathwater” scenario.  Some of the better planning tools allow for the import of completed planning data directly into the software tool, retaining all of your previously completed hard work .

Time spent evaluating a Business Continuity / Disaster Recovery software planning tool may benefit your constantly changing and evolving plans and be of great value to your organisation.

Top 5 things to look for in a Business Continuity Consulting provider

Wednesday, February 3rd, 2010

The linked article here by Richard Jones of Burton Group in the US whilst written in 2008 is worth revisiting because it describes some useful tips on how to get the right staff for Business Continuity Planning. The article describes what you need in an internal BCP leader and how to find the right BCP consulting firm.

To summarise, the top 5 tips for finding the right Business Continuity Planning Consultants are:

  1. They should be able to produce a reference list of nearly all of their clients.
  2. They should clearly state their billing structure so there are no nasty surprises or sub-standard deliverables.
  3. They should be able to service all of your business locations.
  4. They should have experience in your type of business or at least a wide variety of industries rather than just specialising in just one vertical market.
  5. They should provide training, mentoring and tools to empower the organisation to continue the process internally.

So how do we stack up? OpsCentre is confident that we can tick all of those boxes.

Point 5 is something we feel really passionate about. At OpsCentre we don’t want to leave you with a set of documentation that gathers dust on the shelf. We want to help embed business continuity into the organisational culture so that there is a continual improvement cycle and evolution towards maturity of business continuity within that organization.

Read the full article here.

7 Habits of Highly Effective Business Continuity

Friday, January 29th, 2010

1. The Senior Executive actively supports Business Continuity

The CEO\Director\General Manager that believes in and wants a functional Business Continuity program in place is a critical success factor.

To have a senior Executive that is responsible for setting the priorities and vision for the organisation to stand behind BCP and communicate this to the staff is a powerful change motivator. 

2. A Whole of Business Approach

A business continuity program that prioritises the organisation from the Executive’s birdseye perspective as well as analysing business impacts across all business functions in a consistent manner will lead to a better informed business continuity strategy being proposed. It allows the Executive to see the requirements of the business in a single snapshot and make a cost benefit justified decision on the level of continuity required.

3. A Single Point of Business Continuity Management

Someone needs to be responsible for BCP at an organisational level. It needs to be in their job description and a priority for them, otherwise it runs the risk of falling between the cracks. With one person accountable for co-ordinating, aggregating, monitoring the overall Business Continuity program and reporting to the Executive, the program is more likely to stay visible and maintain momentum.

4. Testing, Testing, Testing

Business Continuity should be viewed as an ongoing continuous improvement program. And as such testing is vital. It highlights flaws and validates assumptions in your business continuity plans, giving opportunity to improve them. Testing builds confidence and competence within the business continuity team as it brings home how the strategy would actually work in a variety of scenarios and how the roles will interrelate. An untested Business Continuity Plan cannot be considered viable.

5. Embedding BCP into job descriptions and procedures

The various BCP roles such as BCP Manager, Command Team Leader, Business Unit Leader, etc should be written into position descriptions so that it is very clear that is a part of the responsibilities of the staff members. Procedures for new projects, business changes and IT changes should include provision for ensuring the change has BCP/ IT Disaster Recovery aspects taken into account. All changes should have an impact analysis conducted that includes impact on BCP/IT Disaster Recovery procedures.

6. Starting on the right foot

An induction training package that briefs new employees on the Business Continuity and Emergency Management strategies and plans in place is a great way to start them off on the right foot, highlighting the importance of this to the organisation.

7. Maintenance

The person responsible as BCP Manager should be tasked with ensuring maintenance of the documentation occurs on a regular basis. Outputs from changes and testing sessions all need to be fed into the plans.  Periodically the BIA should be revisited and organisation’s prioritisations and maximum tolerable outages reviewed.

Business Continuity and Disaster Recovery Events Calendar

Monday, January 25th, 2010

OpsCentre have compiled the following list of Au/NZ Business Continuity and IT Disaster Recovery related exhibitions, expos, conferences and other events.

Hope to see you there at one or more of the events.

Feb 23/02/2010 Sydney Continuity Forum CF Experienced User Special Interest Group
Feb 24/02/2010 Wellington Conferenz 5th Annual Business Continuity Conference
March 22/03/10 & 23/03/10 Sydney CEBIT CEBIT – Future Proofing your data centre conference
March 23/03/2010 Sydney Continuity Forum Business Continuity Awareness Week Kick-off event
March 24/03/10 & 25/03/10 Sydney BCI Australasian Business Continuity Summit 2010
March 24-25 March 2010 Sydney Gartner Gartner Infrastructure, Operation and Data Centre Summit
May 5/05/2010 NZ Continuity Forum New Zealand Conference
May 19/05/10 -20/05/10 Canberra IQPC Enterprise Risk Management for Government 2010
May 24 – 26 May 2010 Sydney CEBIT CEBIT 2010
Sep 8/09/2010 Sydney Continuity Forum Continuity Forum Conference and Expo
Nov 10/11/2010 Sydney Continuity Forum BC in Government Conference

Further details canbe found on the websites of the respective companies organizing the events.

Business Continuity Terminology – What’s the difference between MTO, RTO and RPO?

Sunday, January 3rd, 2010

A common query that we come across in business continuity consulting is, ‘what is the difference between MTO, RTO and RPO?’

MTO is the Maximum Tolerable Outage
The Maximum Tolerable Outage for a critical business process represents the maximum amount of time that an organization can survive without the business process in any form (manual or automated). Defining the MTO for a process gives you the deadline for when this process must be up and running in some form or another. 

The BCI describes MTO as ‘At what point in time do you need to either recover your business process, or invoke contingency procedures to prevent you from meeting your business objectives\targets.’

RTO is Recovery Time Objective
Recovery Time Objective is essentially the timeframe requirement for how long it should take to recover from the time of declaring the disaster (not the time of the actual incident) to when the critical process or system is available to users.

RPO is the Recovery Point Objective
The Recovery Point Objective  describes the age of the data you want to restore in the event of a disaster. For example if your RPO is 6 hours, you want to restore systems back to the state they were in no longer than 6 hours ago. This dictates your backup requirements, in this example you must be making data backups at least every 6 hours. Any data created up to the 6 hour RPO will be lost and will need to be recreated during your recovery process (if possible).

OpsCentre offers Recession Buster ‘Quick Start’ Business Continuity Planning

Thursday, December 31st, 2009

This program is ideal for the small to medium enterprise.  It is a fixed fee, fixed scope project that provides a complete solution in the fastest possible timeframe. It can usually be completed within a 1-2 week period.

We utilize our consulting experience and best-practice materials to adapt a business continuity strategy to suit your business.

We can offer these services for business continuity and also IT disaster recovery or pandemic planning.

More details in the service overview download section of our website. PDF’s available to download under Quick Start.

OpsCentre Consulting Service Overviews

What is the difference between disaster recovery and business continuity planning?

Tuesday, December 29th, 2009

Persons new to recovery planning often find it difficult to differentiate between Business Continuity and Disaster Recovery. In its simplest form, Business Continuity differs from Disaster Recovery in that its focus is on people and the continuation of business processes and objectives rather than the availability of IT systems and infrastructure.

Business Continuity Planning deals with taking pro-active measures to ensure continuity of business as well as plans to manage the response and recovery from a business interruption. The Business Continuity Plan would include a plan for the Command Team who will co-ordinate and oversee the response as well as sub-plans for the business units.

The IT Disaster Recovery Plan supports the recovery effort by detailing the IT system recovery priorities and time constraints, plans and strategies for recovery as well as detailed restoration procedures. The priorities and time constraints need to be driven from the business continuity requirements identified in the business impact analysis.

Of vital importance is getting Business Continuity Plans and IT Disaster Recovery Plans to dovetail in and work together to support one another in a recovery effort.

Need help integrating the pieces of the puzzle? Disaster Recovery and Business Continuity Consulting

Disaster Recovery – Backup and Recovery Optimization

Sunday, December 27th, 2009

Gartner and Sungard partnered to produce research regarding ways that backup and recovery can be optimised to reduce or contain costs.

The report contains some useful tips and considerations for IT Managers/Directors that are looking for ways to manage IT costs.

See the full free Gartner online research report here.

Choosing a Business Continuity Recovery Site

Wednesday, November 25th, 2009

If an organization experiences a ‘denial of access’ or ‘loss of premises’ due to incidents such as extended power outage, flood or fire, an alternate location for critical business processes and staff needs to be established.

An Alternate Site is the premises to which a business unit may transfer its operations in the event of a business continuity incident. This is sometimes also known by the name Fallback Site or Recovery Site.

There are a number of different options that can be used as an Alternate Site depending on organization’s overall BCP strategy, recovery time frame requirements, budget etc. These are:

Commercial Recovery Site
In most capital cities there are organizations that provide both dedicated and shared recovery seats and some provide IT recovery infrastructure as well. Annual leasing fees are paid based on the number and type of seats required as well as for any IT equipment, storage of your IT equipment and other related services.  

Internal Property Assets
Sometimes organizations may have other property assets which have vacant, underutilized or lower priority business functions housed there. These could be designated as an Alternate Site  for a higher priority business function should the BCP need to be invoked. This is why it is important to have a clear prioritization of your business functions from the BIA as it will ensure lower priority business functions are vacated in the event of a significant business disruption to enable operations of a higher criticality to continue. It is also vital to have a displacement plan in place for the regular staff of the Alternate Site so everyone knows where they are going. Other considerations when planning how to use the displaced Alternate Site are transport, parking, seating, security access and IT requirements.

Telecommuting
Often staff are already geared up to telecommute and this does offer a low cost solution that suits many business functions. However there still needs to be a clear plan around which business functions are expected to telecommute and to ensure they have the resources such as IT equipment and remote access in order to do their jobs.

Vacant seats or displaced seats at a partner \third party organization
On some occasions there is a partner\third party organization that have capacity to house additional staff should the need arise. This may be a reciprocal arrangement. If an organization needs to rely on this type of arrangement it should be formalized and reviewed on a regular basis to ensure the seats are able to be made available should they be needed and to outline any commercial terms.

Commercial Serviced Offices
A commercial serviced office will certainly have the meeting room, seating and internet access required to get many people up and running initially. However, as this is a first-in first-served arrangement it is not recommended that this be relied upon as the sole recovery site for critical functions. If the serviced office is likely to be subject to increased demand from other organizations affected by the incident, you may not be able to get in as expected. It is still a useful contingency to have the contact details for some serviced offices both near the office and geographically separate as well.   Hotels are also another option as they will typically have a business centre and meeting rooms.

In all instances it is best practice to maintain geographic distance between your primary site and your Alternate Site(s) in case there is a widespread incident affecting the general area of your primary site, for example, a large power outage. If your Alternate Site is too close, it may be affected as well. 

Whichever type of Alternate Site is selected it is vital to include this as part of your regular Business Continuity and IT Disaster Recovery testing exercises to build staff familiarity and ensure that they can activate and function as you planned.

Latest Global Disaster Recovery research just released by Symantec

Friday, October 30th, 2009

Symantec Corp have now released their annual Global Disaster Recovery Survey.  Surveying 1,650 companies worldwide in June 2009, the target audience was CIO and CTO Executives within companies that had 5,000 or more staff.

The survey assesses many aspects of disaster recovery, including Cost of Downtime, Planned Budgets, Impacts of DR Testing and Virtualisation Trends.

The report can be found here: http://www.symantec.com/about/news/resources/press_kits/detail.jsp?pkid=disasterrecovery