Why and What are Data Movement Solutions for Continuous Business

Roselinda R. Schulman, CBCP Worldwide Sales Storage Support

What is Business Continuity?

• Continuous Business = Staying in Business– Business Continuity Planning is what companies do

to ensure that they can continue operations in the face of planned and unplanned ‘events’.

– Provisions for business continuity are driven by an understanding of…

• Business impact: assessing the impact of ensuring continuous business

• Business processes/risks: assessing the frequency and/or likelihood of planned and unplanned events

• Data/availability protection is only one part of business continuity (don’t forget about business-critical processes, logistics, recovery execution plans, etc)

The DR Dynamics of Change

• The early 1990s the best companies expected to recover their business operations in three days to within 24hrs of the disaster

• Between 1997 and 2000 the best companies expected to recover within 24hrs with minimal loss of data at the point of disaster

• The internet driven world has changed all this.. The best companies need to have near zero recovery times with no data loss….

WTC Bombing - 1993

• Fact - When the world Trade Centre was bombed in 1993 with relatively minor damage 150 companies went out of business….

What is expected from your business

• If your business does not meet these expectations…– Financial loss will occur - $100K minimum per hour– Potential Asset loss - Information– Liability - Suppliers, Customers and Regulators– Customer Loss– Brand Name or Reputation damage– Investor/Stock Market confidence loss….

• Not all these can be measured financially but all will have an effect on the companies bottom line….

Cost of Downtime by Industry Sector

$0

$500,000

$1,000,000

$1,500,000

$2,000,000

$2,500,000

$3,000,000

Revenue/Hour

Energy

Telecommunication

Manufacturing

Financial Inst.

Information Tech.

Insurance

Retail

Pharmaceuticals

Banking

Food/Beverage

Consumer Products

Chemical

Transportation

Utilites

Healcare

Metals/Natrual Res.

Professional Serv.

Electronics

Construction/Engineering

Media

Hospitality/Travel

Average

Source: Meta Group, 10/2000

Other Considerations

• Its not just Incidents on the scale of September 11th that can impact your business….– ASX - Australian Stock Exchange - Failed

Software Upgrade - 2 Hrs – Virus Attacks

• Yahoo• eBay• CCN• AOL

– London Stock Exchange - Human Error - Online trading system down all day

Your critical data needs to be protected from:

• Human error or sabotage– Feb ‘00 - DDoS attacks against eBay, Amazon and Yahoo

• Data corruption• Hardware failures

– Sept 00’- Power Outage at an airlines main operations centre played havoc with computers that control air traffic, delaying or affecting 300-400 flights across the US.

• Software glitches• Advanced Notice (Planned) Outages• Sudden (Rolling) Disasters• Lingering (Duration) Outages

Terminology

• Risk Analysis– Identification of threats

• Business Impact Analysis– Establish Value, identify critical resources, establish priority

• Recovery Time Objective– Time within which Business Functions or Applications must be

restored.• Includes time before disaster declared and time to perform tasks

• Recovery Point Objective – The Point in time to which data must be restored to successfully

resume processing– Often thought off as time between last backup and when outage

occurred

Where Are You Today

• Have you recently conducted

– BIA, Risk Analysis, Critical records analysis

• Correlate Cost vs. Risk

– Cost

• Cost of Re-Creating data and transactions

• Cost of Technologies - storage, network, platforms

• Re-engineering costs associated with infrastructure refresh

– Risk

• Likelihood of event

• Cost of downtime ( monetary and reputation)

• regulatory/legal penalties for non-compliance

• Competitive (dis)advantages

Some Considerations to Start

• Solution must meet your goals and objectives– Realistic Expectations need to be set

• The Business need will be defined by things like the BIA and Risk Analysis

• Subject expertise• What groups/departments are involved

– Network, Auditing, Business line

• Look at educating different groups within your organization so they better understand some of the issues

Traditional Disaster Recovery Timeline

Activate Recovery

Site

RestoreNetwork

IPL andsynchronizeoperatingsystems

Load On-LineDatabases

Begin StagingApplications for First Day

Forward recover On-LineFiles withTransaction Journals

Batch Cycle-LoadApplication batch files

Start

On-Lines

2 6 12 23 24

24 + Hours- Applications start and continue processing integrated cycles until batch cycles with calendar Date

Advanced Disaster Recovery

• Electronic Vaulting• Files transmitted on a regular basis

• Remote Journaling• Remote Mirroring

– Real-Time Remote Copy

• Hot Standby Site• Active/Active Sites (Clustering, GDPS)

Some More terminology

• Real Time Copy– Refers to the mirroring of data, – Should provide an IO consistent copy of that data. – Every Update is Replicated 

• Point-in-Time Copy (PiT)– refers to a copy of data that that is taken at a specific point in

time. Ideally this copy should be IO consistent. – PiT copies are used in many ways including backups and

checkpoints. – More recently PiT copies are used as part of architected

disaster recovery solutions.• NanoCopy

Disaster Recovery Tiers: Definitions• Tape Back-Up – A Point-in-Time back-up is made to tape and sent off-site.• Available System – System must be available at time of incident• Remote Logging – Either to Tape or Disk• Active System – System is available and software is loaded, ready to run and

is often required to run software such as HXRC• Recovery Time Objective (RTO)– Time to resume operation at secondary IT

facility… this is the duration of the service interruption.• Recovery Point Objective(RPO) – Worst case time between last back-up and

interruption time.

Tier # Description of Tier

Tape Back-Up

Remote Disk

Real-Time Disk

Remote Logging

Available System

Active System RTO RPO

#1 PiT X 2-7 Days 2-24 hrs#2 Tape to provisional back-up site X X X 1-3 Days 2-24 hrs#3 Disk Point in Time copy X X 2-14 hrs 2-24 hrs#4 Remote logging X X X 12-24 hrs 5 mins#5 Concur ReEx (RDF, E-Net) ?? X X X 1-12 hrs 5 mins#6 Remote copy X X 1-4 hrs 0-5 mins#7 Remote copy with failover X X 5-60 mins 0-5 mins

Diversity in Data Protection Requirements

• Different Types of Data Require Different Levels of Protection

• Data Audit Required to Assess Business Criticality, and Cost to Recover

Completely Duplicated/Interconnected hot-site

Remote Disk Mirroring

Disk Mirroring

Shared Disk

Single Disk Copy

Electronic VaultingTape On-site

Tape Back-upOff-site (trucks)

Disk Consolidation

More

LessDelayed

Immediate

More

LessAmountof Data

RecoveryTime

Importance ofData

Recovery Tiers – What is the right one

• There is no wrong one• More important is meeting the objectives• Have you other options other than Real-Time

replication– If you have a 24 hour RPO you may not need it

• The higher the tier, typically the greater the cost and complexity

• Combinations or hybrids may be appropriate

Considerations when Architecting Continuous Business Solutions

• Planning, Planning Planning• Document, Document, Document• Solutions must accommodate multiple

environments and Businesses• What is the right solution

– software, hardware, real-time, PiT, multiple

• Careful analysis is required– Application types, amount of data– Performance requirements, remote site location– Transmission capability/cost– What are the future requirements

Solution Design

• Detailed Assessment Typically Required– Questionnaire/Interviews– Planning Session– Performance data– Data Analysis

• How Much, Where, Placement• Current Infrastructure

• Will need to match goals and objectives along the the cost

• Customers may have to consider reengineering of applications or placement of data

• May take a couple of iterations and customer feedback before final design

Real-Time Mirroring Technologies

• Options for Consideration– Synchronous Remote Copy– Asynchronous Remote Copy– Hardware based – Software Based– Log Replication– Application Level Copy

• All are Viable– Depends on Many Factors

• Performance, Cost, type of data, platform etc.

And it doesn't end there

• Make sure you have a Baseline• Change control is critical

– Impact must be carefully considered– Procedures need to be up to date

• Ongoing monitoring of environment – Network– Subsystem response time

• Disaster Recovery Testing– Frequency– Document and fix

• “A 22-hour Blackout … Cost Ebay up to $5 Million in Forgone Revenue and a $4 Billion Slide in Market Value, and” Two Weeks Later “Not Yet Fully Recovered.” Forbes, July 26 1999

• Ebay’s eProfile:• Over 2 Million Items Tracked

• 300,000 Additions a Day

• 1 Million Visitors a Day

• 600 Bids a Minute

The June 10th Crash Damaged Ebay’s Reputation and Caused a 26% Plunge in Stock Price by June

14th.

It’s Only Swapping Beanie Babys & Fiesta Ware

More Real World

Thank YouQuestions?