Design a Backup and Recovery Strategy for the following scenario

7/2/2016 1 Disaster Recovery Principles and Practices by April J. Wells, Charlyne Walker, and Timothy Walker Chapter 5 Identify Data Storage and Recovery Sites © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites2 7/2/2016 2 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites3 Chapter 5 Objectives  Determine the best way or ways to back up data so that it can be recovered later  Evaluate off-site storage options  Acknowledge information as well as hardware and software as an asset  Determine recovery site options © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites4 Chapter 5 Objectives (cont.)  Examine recovery site types  Develop recovery site selection criteria  Outline a recovery solution 7/2/2016 3 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites5 Introduction  This chapter discusses how to  Back up data  Choose recovery sites © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites6 Data Backup  What media  To d i s k  To tape  To CD/DVD 7/2/2016 4 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites7 Data Backup (cont.)  When  When servers are least active  Some systems may need to be shut down for accurate backup © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites8 Data Backup (cont.)  How often  According to company policy/regulations  Consider  Recovery point objective  Recovery time objective  Maximum allowable downtime 7/2/2016 5 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites9 Data Backup (cont.)  Where  On site  Easy and quick to restore  Need to maintain security  Disaster could also affect backups  Off site  More expensive  Owned or contracted © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites10 Information as Asset Include in backups:

 Software programs  Licenses for software and software-hardware combos  Metadata  Prioritize for order of recovery  Critical  Vital  Sensitive  Noncritical 7/2/2016 6 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites11 Recovery Site Alternatives  Hot backup site  Stores real-time duplicate of data  Warm backup site  Contains hardware used at primary site  Backups taken to site to begin recovery  Cold backup site  Leased space  Must obtain/delivery physical and data resources to begin recovery © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites12 Recovery Site Alternatives (cont.) Advantage Disadvantage Hot Minimal data loss Most expensive Warm Reasonable recovery timeStill costly Cold Minimal cost Longer recovery 7/2/2016 7 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites13 Recovery Site Alternatives (cont.)  Reciprocal agreements  Two or more companies join as partners in disaster recovery  Must be physically separated  Good for businesses with limited DR budgets  Two data centers  Used by smaller businesses concerned with cost  Contains hardware and software resources © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites14 Recovery Site Alternatives (cont.)  Consortium arrangement  Similar to reciprocal agreement, but more formal  Not typically used  Vendor-supplied equipment  Vendors agree to supply if emergency declared  More difficult if custom equipment used  Combinations  Best solution may be a custom combination 7/2/2016 8 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites15 Recovery Site Agreements The written agreements should contain:

 Contract duration  Watch end date for renegotiation of contract  Termination conditions  Conditions for and consequences of ending agreement before expiration  Permission to test DR plan © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites16 Recovery Site Agreements (cont.)  All costs  Security measures required/provided  Clause to allow systems changes  Hours of availability to resources  Specialized hardware requirements  Personnel requirements 7/2/2016 9 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites17 Recovery Site Agreements (cont.)  Conditions constitution an emergency  Contract renegotiation process  Non-server related resource requirements  Priorities  Availability of resources according to when needed  Other issues needed but not covered above © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites18 Recovery Site Selection Criteria  Number of sites available  Having choices a plus if disaster hits more than one location  Distance from primary site  Too close – disaster may also affect  Too far – longer recovery time due to travel 7/2/2016 10 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites19 Recovery Site Selection Criteria (cont.)  Facilities  Can office supplies be readily obtained?  Located near restaurants, supermarkets?  Close to hotels, motels, short-term housing?  Easy access to postal services?  What recreational facilities are available? © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites20 Recovery Site Selection Criteria (cont.)  Cost  Site cost  Travel cost  Actual cost – airline tickets, gasoline, etc.  Time cost – the employees’ (and recovery) time used to reach the location  Living costs during recovery  Cost of living varies by area  Contract  What is included; additional costs 7/2/2016 11 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites21 Design Recovery Solution  Establish recovery site  Choose type of site  Choose to build or rent/share a site  Cost is a major factor in these decisions © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites22 Design Recovery Solution (cont.)  Select backup strategies for electronic media  Full – complete backup  Incremental – changes since last backup  Differential – changes since last full backup  Mirror – complete backup; data not compressed 7/2/2016 12 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites23 Design Recovery Solution (cont.)  Select backup strategies for non-electronic media  Make copies and store  Digitize and store electronically © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites24 Design Recovery Solution (cont.)  Select storage backup and recovery tools  A variety of data backup solutions are available from vendors  A company can also create its own  SANs are widely used for storage 7/2/2016 13 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites25 Design Recovery Solution (cont.)  Consider current trends in recovery planning  Government regulations  Terrorism  Includes indirect impact from others in chain being affected  24/7 access to data  Access to email system © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites26 Design Recovery Solution (cont.)  Restore communications  Use BIA to prioritize user access restoration  Restore/reroute voice, mail, and goods delivery  VOIP good method for rerouting voice communications  Complete proper forms to reroute mail  Create plan for rerouting/postponing delivery of goods 7/2/2016 14 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites27 Design Recovery Solution (cont.)  Eliminate single points of failure  Hardware or software  Can be costly due to duplication of hardware/software  User  Due to lack of training, fatigue, error  IT department  Maintain diligence in security/antivirus upgrades © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites28 Design Recovery Solution (cont.)  Connect end users  Locate temporary space for users  Determine connectivity  Consider IP addresses, firewall ports, dial-in access, etc. 7/2/2016 15 © 2006 by Pearson Education, Inc. Chapter 5 Identify Data Storage and Recovery Sites29 Summary  You now have the background to evaluate data backup solutions and alternative recovery sites  This information will help you in designing your recovery solutions