Chapter 7- slide 1Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Chapter 7Enterprise Infrastructure, Metrics, and Business Continuity Planning

Prof. Anita Beecroft, Kwantlen Polytechnic University in British Columbia created the original slides for Chpt 7

Prof. Tim Richardson, University of Toronto created the additional slides on off-site back-up and business continuity planning in March 2011

Chapter 7- slide 2Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Offsite Backup – a historical context

In 47 B.C. Julius Caesar commanded his troops to burn the famous library at Alexandria

Chapter 7- slide 3Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Offsite Backup – a historical contextIn A.D. 391 the library was

burnt again, this time by a Christian emperor named Theodosius I

Theodosius was the last emperor to rule over both the eastern and the western halves of the Roman Empire

Chapter 7- slide 4Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Offsite Backup – a historical contextIn A.D. 642 Omar, the Caliph of

Baghdad had his army burn down the library

all excellent lessons in the importance of off-site backups.

If there had been a back-up of some documents after the original fire, the world would have a priceless archeological resource

Chapter 7- slide 5Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Offsite Backup a Snug Fit for Adidas Canada

Adidas Canada has a head office, distribution centre, showroom and many stores throughout Canada.

From all of these locations, a great deal of data is generated. The backup of this data was outsourced to Storagepipe, a company in Toronto.

Storagepipe backs up Adidas Canada’s data daily, weekly and monthly. Adidas does its own inhouse backup at year-end.

Chapter 7- slide 6Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Offsite Backup a Snug Fit for Adidas Canada

1. Adidas’s agreement with StoragePipe is part of a “business continuity plan.”

2. Offsite storage provides a measure of protection for the company’s crucial data and information.

Chapter 7- slide 7Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Business Continuity

The ability for a business to continue is important in an intensely competitive environment

If business was NOT so competitive, you could take time to recover from an event/disaster, and re-develop business with your customers

Chapter 7- slide 8Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Business Continuity Because business IS competitive, compounded by

the effects of theEconomic EnvironmentTechnological EnvironmentPolitical – Legal – Regulatory EnvironmentSocial – Cultural EnvironmentGeographic Environment

Weather extremesTime zonesClimate changes

Chapter 7- slide 9Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Offsite Backup Business Continuity

1. To create a possibility of Business Continuity we use

2. Contingency Planning

3. See http://www.witiger.com/internationalbusiness/politicalriskcontingencyplanning.htm

Chapter 7- slide 10Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Offsite Backup Business Continuity

1. What sort of “personal continuity plan” do you have for your car, apartment, and other important parts of your life?

Chapter 7- slide 11Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Offsite Backup a Snug Fit for Adidas Canada

3. When was the last time you were dealing with a company and someone said, “I’m sorry but our computer systems are down right now, so I can’t help you”?

4. How did that make you feel?

5. How did you react?

Chapter 7- slide 12Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Business Continuity PlanningBusiness continuity planning (BCP) is a rigorous and well-informed organizational methodology used to develop a business continuity plan.

In the past, this plan only addressed the steps an organization would follow to recover from a disaster or extended disruption. Now the BCP may be more all-encompassing addressing all aspects of the organization.

BCP, like the systems development life cycle has consecutive phases.

LO4

Chapter 7- slide 13Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

Business Continuity Planning Methodology

LO4

Chapter 7- slide 14Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

BCP Phases

1. The organizational strategic plan gives the relative importance of resources, processes, systems and other assets.

2. Analysis includes impact analysis (risk assessment), threat analysis (recovery details for various threats)and impact scenario analysis (worst-case scenario’s for each threat). At the conclusion of this phase, a requirement recovery document outlines critical and non-critical IT systems, information, threats and worst-case scenarios for each type of disaster.

LO4

Chapter 7- slide 15Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

BCP Phases

3. The design phase results in a disaster recovery plan based on a disaster recovery cost curve.

LO4

Chapter 7- slide 16Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

BCP Phases3. Design (continued)

During the design phase, a collocation facility may be rented. This facility would include office space and telecommunications equipment . Backup information could also be stored at this facility. Some organizations rent a hot site which is a separate and fully equipped facility. In the event of a problem, employees could relocate here and begin working immediately. A cold site is rented space that has no computer equipment.

LO4

Chapter 7- slide 17Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C.Prof. Tim Richardson, University of Toronto

BCP Phases

4. During the implementation phase, IT systems are evaluated to make sure disaster recovery is adequately addressed. Procedures, rental agreements and training are implemented.

5. During testing the disaster recovery plans for various scenarios are tried out.

6. For maintenance, systems continue to be monitored, supported and maintained especially when new threats are identified.