Disaster Recovery BCP Kevin Walter MSU Federal Credit Union

1
Disaster RecoveryBCPKevin WalterMSU Federal
Credit Union
2
Contents

• Intro
• BCP
• Backups
• Centurion
• NeoScale

3
Intro

• DR preparedness is costly but necessary
• 93 of companies that lost their data center for
  10 days or more due to a disaster filed for
  bankruptcy within one year of the disaster.
• (Source National Archives Records
  Administration in Washington.)
• Recent events
• Katrina
• Midwest Tornados
• CU events
• Fire
• Server crash

4
BCP

• Business Continuity Planning
• Five main phases
• Analysis
• Solution design
• Implementation
• Testing and organization acceptance
• Maintenance

5
Analysis

• Identify events that could threaten business
  continuity
• Hurricane
• Flood
• Fire
• Disease (Bird Flu)
• Hardware failure
• Physical failure
• Attack

6
Threat

• Train

7
Threat

• Plane

8
Solution Design

• Minimum applications
• Symitar
• ATMs
• Internet Banking
• Acceptable Time Frame
• Days?
• Hours?
• Other items
• the crisis management command structure
• the location of a secondary work site (where
  necessary)
• telecommunication architecture between primary
  and secondary work sites
• data replication methodology between primary and
  secondary work sites
• the application and software required at the
  secondary work site, and
• the type of physical data requirements at the
  secondary work site.

9
Implementation

• Execution of plan
• Initial testing

10
Testing and organization acceptance

• Annual testing (Centurion?)
• Organization accepts results
• Crisis command team call-out testing
• Technical swing test from primary to secondary
  work locations
• Technical swing test from secondary to primary
  work locations
• Application test
• Business process test

11
Maintenance

• Staffing changes
• Hardware changes
• Software changes

12
Maintenance

• Changes to important clients and their contact
  details
• Changes to important vendors/suppliers and their
  contact details
• Departmental changes like new, closed or
  fundamentally changed departments.
• As a part of ongoing maintenance, any specialized
  technical deployments must be checked for
  functionality. Some checks include
• Application security and service patch
  distribution
• Hardware operability check
• Application operability check
• Data verification
• As work processes change over time, the
  previously documented organizational recovery
  procedures may no longer be suitable. Some checks
  include
• Are all work processes for critical functions
  documented?
• Have the systems used in the execution of
  critical functions changed?
• Are the documented work checklists meaningful and
  accurate for staff?
• Do the documented work process recovery tasks and
  supporting disaster recovery infrastructure allow
  staff to recover within the predetermined
  recovery time objective?

13
Backups

• Off site locations
• Curriers
• Fireproof
• Locked
• Over the wire
• Backup
• Tranlogging
• Remote failover
• NeoScale

14
Centurion

• DR hot sites
• Many around US
• Most hardware available
• Skilled personnel available
• http//www.centuriondr.com/what_we_do/white_papers
  /index.asp

15
NeoScale

• Setup
• Daily backups
• Restore on core server
• Recovery on new hardware
• NeoScale Appliance
• Configure
• Terminal connection
• Catalog file
• Configuration file
• Load shared keys
• Smart Card reader
• 2 cards required
• User name and passwords for each card
• Pass phrase required
• Card code required

16
Questions??