Business Continuity and Disaster Recovery

1
Business ContinuityandDisaster Recovery
NETWORK PROFESSIONAL ASSOCIATION

• Seminar presented by the
• Network Professional Association
• of the DC Metro Area

November 20th 2002
2
Agenda

• Introductions
• NPA Overview
• Seminar Objectives
• Vendors / Sponsors
• Seminar
• Expert Panel
• Interactive Presentations
• Closing vendor peer interaction

3
NETWORK PROFESSIONAL ASSOCIATION

• The mission of the Network Professional
  Association is to advance the Networking Industry
  towards a profession.
• Our objective is to unite network computing
  professionals in a worldwide association
  determine member needs and interests deliver
  programs and services to meet those needs and
  interests.

4
Workshop/Seminar Objectives

• Business Continuity
• Disaster Recovery and Planning
• Vendor Information
• Audience Participation

5
Sponsors
6
Contributing Vendors
7
Vendor Presentations

• Fortrex Network Security and Disaster Recovery
  Planning
• Sun Highly Available and Highly Utilized IT
  infrastructure
• Novell Solutions for Business Continuity
• ServerVault Secure Active-Active Disaster
  Recovery Configurations
• Ipswitch Network Management / Monitoring
• Recovery Point Integrated Disaster Recovery
  Site
• IBM Business Continuity and Recovery Services

8
Speakers

• Fortrex Doug Ochs, President
• Sun Dave Brillhart, Datacenter Architect
• Novell Ramesh Pattni Novell, Senior Strategist
• ServerVault Rich Bates, VP of Operations
• Ipswitch Kelly Anderson, Marketing Analyst
• Recovery Point Marc Langer, President
• IBM Ray Kearns, BCRS Sales Agent

9
EXPERT PANEL

• Trends and Developments in Business Continuity

10
Panel Members

• Dave Brillhart Sun, Datacenter Architect
• Doug Ochs Fortrex, President
• Jeff Berman FatPipe, Regional Sales Manager
• Mike Lee Network Computing Magazine, Editor
• Paul Striedl Association of Contingency
  Planners, President Capital Area chapter
• Ramesh Pattni Novell, Senior Strategist

11
NPA PRESENTATION
12
Three Main Topic Areas

• Prevention
• Planning
• Recovery

13
PERSPECTIVE
14
PREVENTION
15
Prevention

• Areas for Concern
• High Availability
• Monitoring
• Security
• Servers
• Data
• Power Backup
• Telecommunications

16
Areas for Concern

• Power Outage
• Service Interruption
• Fire Damage
• System Failure
• Data Corruption
• Security Incident
• Natural Disaster
• Physical Attack

Prevention
17
High Availability

• Redundancy / Failover
• Hardware Products
• Software Products
• Manual Intervention
• Distributed Systems
• Self Healing
• Vendor Relationships

Prevention
18
Monitoring

• Network Monitoring / Alerting
• Know What You Have
• Mine Log Files
• Security Alerts
• Intrusion Detection

Prevention
19
monitoring - Ipswitch
Kelly Anderson Product Marketing Analyst

• Network Management
• Mapping
• Monitoring
• Notification
• Reporting
• Access

Prevention
20
Security

• Firewall
• Border Systems
• Intrusion Detection
• Vulnerabilities
• Awareness
• Audit
• Policies Drive Systems
• Outsourcing

Prevention
21
security - Computer Crime

• Tresspass
• Theft / Denial of Services
• Alteration of Data
• Damage to Software
• Theft of Information
• Theft of Money

Prevention
22
security - Services
Doug Ochs President

• Fortrex Technologies
• Managed Security(intrusion detection, firewall,
  vulnerability scanning)
• Enterprise Security Management(assessment,
  audit, training, deployment, policy)
• Information Security Process(ongoing analysis,
  monitoring, continual process)

Prevention
23
security - Physical

• Physical Access
• Employees
• Contractors
• Intellectual Property
• Protection
• Inventory
• Computer Forensics
• Discovery / Investigation
• Experience
• Staff Issues
• Internal Threat
• Background Checks

Prevention
24
security - Viruses / Worms

• Gateway Scanning
• SMTP, POP and HTTP also
• Layered Approach
• Border
• Servers
• Desktops
• Appliances
• Acceptable Use

Prevention
25
Servers

• Downtime Costs 1,000 Minute
• Fault Tolerance
• Storage Area Network
• Offsite Processing
• Hot Spares
• Clustering
• Load Balancing

Prevention
26
Power Backup

• Power Outages
• Cost US Companies 80 Billion
• Interrupts 72 of US Businesses
• Most Common Disaster
• Cover in Recovery Section

Prevention
27
Data

• Architecture Developments
• Storage Area Networks
• Managed / Secure Hosting
• Geographic Distribution
• Data Center Facilities

Prevention
28
data - ServerVault
Richard Bates Vice President of Operations

• Managed Hosting
• Storage Solutions
• Security Integration
• Site Mirroring
• VPN Services
• Application Services

Prevention
29
data - Sun Microsystems
Dave Brillhart Datacenter Architect

• Highly Available and Highly UtilizedIT
  Infrastructure
• Service Delivery Platform
• N1 Datacenter Architecture
• Geographically Dispersed Clusters
• SunCluster 3 Replication Techniques
• End-to-End Solution Architectures

Prevention
30
telecommunications - Voice

• Additional Phone Lines
• Call Forwarding Options
• Loop Diversity
• Alternate Serving Wire Center
• Switch Redirect

Prevention
31
telecommunications - Services
Peter Borstelmann Vice President of Sales

• Choice Network Solutions
• Verizon Products Services
• Planning and Consulting
• Coordination (long distance carriers, ISPs
  installs)
• Frame, BRIs/PRIs, T1-DS3

Prevention
32
telecommunications - Data

• Hardware Fault Tolerance
• Hot Spares
• High End Protocols
• Loop Diversity / Divergent Paths
• VPN as Backup
• ISDN Backup
• Redundant ISPs

Prevention
33
telecommunications - FatPipe
Jeff Berman Regional Sales Manager
No ISP Cooperation required
Prevention
34
FatPipe Benefits

• Dynamically senses router status, and
  automatically reroutes traffic to available lines
  when services fail
• Dynamic load balancing of IP traffic without use
  of BGP
• Bonds any combination of T3, T1, E1, E3, DSL,
  ISDN, or wireless connections
• Sits transparently in the network
• Plug and play solution to prevent WAN downtime
• Does not require any hardware or software at the
  ISP site

Prevention
35
FatPipe Products

• Xtreme - For medium to large companies requiring
  redundancy for outbound Internet access e.g. Thin
  Clients.
• WARP - For companies hosting internal servers,
  requiring reliability redundancy for inbound
  and outbound traffic.
• Multi-Path VPN (MPVPN) - Bonds multiple VPN paths
  for up to three time the redundancy, and nine
  time the security.
• Multi-Path Frame Relay (MPFR) - Bonds frame relay
  networks from multiple providers into one
  seamlessly connected network at the customer
  site, giving customers total control of the
  reliability and efficiency of their networks.
• IPVPN - Bonds multiple managed and CPE based VPNs
  in to one single seamless WAN. No BGP or NNI
  programming is needed.

Prevention
36
PLANNING
37
Planning

• Risk Analysis
• Spending
• Assets
• Formal Plan
• Team
• Testing
• Team
• Training
• Assistance

38
Risk Analysis

• Mission Critical Systems
• Audits
• Business Priorities
• Stakeholder Interviews
• Downtime Timeframes
• Redundant Systems
• Disaster Levels
• Diagrams

Planning
39
Spending

• How Much Is Enough
• Costs of Downtime
• 1M/hr Major Industry Average
• Senior Management
• Awareness / Tactics

Planning
40
Assets

• Mission Critical Applications
• Data
• Servers
• Storage
• LAN/WAN
• Telecommunications
• Desktop/Laptop PCs
• Remote Access
• Business Processes

Planning
41
Assets - Telecommunications

• Planning Services fromChoice Network Solutions
• Define Critical Business Functions
• Conduct Financial Analysis
• Design Disaster Recovery Plan
• Conduct Tests of Effectiveness
• Analyze Results
• Define Areas of Concern

Planning
42
Formal Plan

• Ownership
• Publishing
• Updating
• Distribution

Planning
43
Formal Plan - Outline

• Introduction
• Business Impact Analysis
• Recovery Strategy
• Disaster Recovery Organization
• Emergency Procedures
• Plan Administration
• Appendix

Planning
44
Testing

• Formal Tests Corporate Wide
• Test Redundancy / Failover
• Test the Plan with Rehearsals
• Quarterly Team Meetings
• Vendor /Partner Plans

Planning
45
Team

• Disaster Recovery Team
• Responsibilities
• Communications
• Formal Procedures
• Training

Planning
46
Training

• Various Seminars / Conferences
• Disaster Recovery Institute
• Certifications
• Associate Business Continuity Planner
• Certified Business Continuity Professional
• Master Business Continuity Professional
• Association of Contingency Planners

Planning
47
Assistance

• Consultants
• Red Cross
• Government Agencies
• Vendors
• Customers

Planning
48
IBM Global Services
Raymond Kearns BCRS Sales Agent

• Business Continuity and Recovery Services
• Backup and Recovery Options
• Assess and Improve Recoverability
• Protect Critical Business Processes
• Assess Disruption Impact
• Continuity Services Managed
• Managed Security Services
• E-Business Management Services

Planning
49
RECOVERY
50
Recovery

• Components
• Prioritization of Work
• Communications
• Human Factors
• Insurance
• Lessons Learned

51
Components

• Data / Apps Backup
• Offsite Storage
• Backup Power
• Fire Prevention
• Alternate Facilities
• Other
• Spare Equipment
• Offsite Processing/Systems
• Manual Services

Recovery
52
components - Recovery Services
Marc Langer President

• Recovery Point Systems
• Offsite Storage
• Disaster Recovery Hotsite(end-user hotsite with
  high speed access)
• Web Based Solutions(online disaster recovery
  solutions)
• Secure Hosting Services(hosting, mirroring,
  hardened facility)

Recovery
53
components - Data/App Backups

• Applications Licenses
• Data Tape Backup
• Across the Wire Backups
• Live Offsite Storage
• Maintain Onsite/Offsite

Recovery
54
Novell
Ramesh Pattni Senior Strategist

• Secure Access
• Portal Services
• NetWare Backup / Mirror
• Clustering
• Central Storage (iFolder)
• Distributed Offices

Recovery
55
components - Offsite Storage

• Vendor Services
• Items to Store Offsite
• Data
• Copy of Applications
• Documentation
• Contact Lists
• Inventory Lists
• Disaster Recovery Plan

Recovery
56
components Backup Power

• Probably Number One Risk(cause 45 of all data
  loss)
• Protect / Provide Power
• Servers and Infrastructure
• UPS to Generator
• Sizing Backup Requirements
• Consult an Engineer

Recovery
57
components Fire Prevention

• Fire Detection
• Fire Suppression
• Computer Room Policies
• Sprinkler Systems
• Halon Phase Out
• Alternatives to Halon
• Consult an Engineer

Recovery
58
components - Alternate Facilities

• Hot Site
• Cold Site
• Service Bureau
• End Users
• Temp Space
• Remote Access
• Mutual Aid Pact

Recovery
59
Prioritization of Work

• Planned Focus
• Mission Critical Systems
• Business Priorities
• Service Levels
• Manage Manpower

Recovery
60
Communications

• Integrate into Formal Plan
• Decision Making
• Information Dissemination
• Vendors / Partners
• Customers
• Employees
• Public Relations

Recovery
61
Human Factors

• Food
• Water
• Rest
• Housing
• Stress

Recovery
62
Insurance

• Property Loss Liability
• Disaster Coverage
• Business Interruption
• Replacement Cost

Recovery
63
Lessons Learned

• Formal Review Process
• What Went Right / Wrong
• Document Actions
• Integrate into Plan
• Prevent Future Impact

Recovery
64
APPENDIX
65
DRP Related Websites

• NPA Community Site www.npa.org then Community
  link
• Global Portal for Business Continuity www.globalc
  ontinuity.com
• Disaster Recovery Institute www.drii.org
• Association of Contingency Planners www.acp-inter
  national.com
• Contingency Planning Research www.contingencyplan
  ningresearch.com
• Mid Atlantic Disaster Recovery Association www.ma
  dra.org
• Disaster Recovery Journal www.drj.com

66
DRP Resources

• Federal Emergency Management AgencyEmergency
  Management Guide for Business
  Industry www.fema.gov/pdf/library/bizindst.pdf
• Small Business Administration Disaster
  Assistance www.sba.gov/disaster
• Disaster Recovery YellowPages www.disaster-help.c
  om
• Disaster Recovery Plan Template
  www.e-janco.com/drp.htm
• Disaster Survival Guide for Communications
  Networks
• www.cmpbooks.com ISBN 1-57820-117-9

67
DRP Article Links

• Other Good Sources of Articles
• CIO Magazine www.cio.com
• Network Computing www.nwc.com
• Information Week www.informationweek.com
• Search Networking www.searchnetworking.com

68
Vendor Presentations

• Presentations and contact info from the vendors
  are online
• www.npa.org/chapters/dcmetro/drp.htm

69
PEER INTERACTION