Disaster recovery and business continuity planning basicsDate: Sep 08, 2009
Andre Gold: Over the past four to five years, I've spent a lot of time in disaster recovery and business continuity planning as part of my role as the chief risk officer as well as the CISO for a couple major organizations. During that time, in working with those firms, I've had a greater appreciation of disaster recovery and business continuity planning, and I've learned that although BCP and DR are very important to firms, when its actually time to execute upon those respected strategies, many firms fail, and they fail fundamentally because they lose sight of the core elements of disaster recovery and business continuity planning. And with that, it's those core elements that we will be discussing today.
Let's set the foundation and actually talk about the definitions of availability, BCP, as well as DR. Second, we will then actually look into core aspects of business continuity planning and how you get started with that. Third we will then talk about recovery, and then fourth, we will look at some pitfalls, or as I call them the 'gotchas' of disaster recovery and BCP and things that, in my experience, I found to be troubling as well as have found to contribute to a lot of companies failures in BCP and DR.
The language of continuity and recovery
The first definition we will talk about is availability. Availability is simply the percentage of time during "schedule" hours that a system or application is expected to be available. You also know that I call it the number of nines. A lot of times this is articulated as five nines, four nines, but it is a subset of nines. The second definition is business continuity -- now, business continuity reflects a comprehensive approach to ensure the business continues to operate when either a small disruption or a natural calamity occurs. A small disruption could be a power surge; a natural calamity could be a hurricane. And trust me I know that one near and dear, having lived in Houston as both Katrina and Rita came through. The third definition we will talk about is disaster recovery. Now, the definition, actually, the phrase moreso, really describes itself. Recovery is the restoration of those business processes in the event that a natural calamity does occur.
Bussiness Continuity and Disaster Recovery Video Series table of contents:
Disaster recovery and business continuity planning basics
Availability, business continuity and disaster recovery
Defining internal risk management policies
Elements of disaster recovery and business continuity planning
Disaster recovery and business continuity planning problems
Preventing business continuity, disaster recovery problems