Why and What are Data Movement Solutions for Continuous Business

1. Why and What are Data Movement Solutions for Continuous Business Roselinda R. Schulman, CBCPWorldwide Sales Storage Support

2. What is Business Continuity? • Continuous Business = Staying in Business • Business Continuity Planningis what companies do to ensure that they can continue operations in the face of planned and unplanned ‘events’. • Provisions for business continuity are driven by an understanding of… • Business impact: assessing the impact of ensuring continuous business • Business processes/risks: assessing the frequency and/or likelihood of planned and unplanned events • Data/availability protection is only one part of business continuity (don’t forget about business-critical processes, logistics, recovery execution plans, etc)

3. The DR Dynamics of Change • The early 1990s the best companies expected to recover their business operations in three days to within 24hrs of the disaster • Between 1997 and 2000 the best companies expected to recover within 24hrs with minimal loss of data at the point of disaster • The internet driven world has changed all this.. The best companies need to have near zero recovery times with no data loss….

4. WTC Bombing - 1993 • Fact - When the world Trade Centre was bombed in 1993 with relatively minor damage 150 companies went out of business….

5. What is expected from your business • If your business does not meet these expectations… • Financial loss will occur - $100K minimum per hour • Potential Asset loss - Information • Liability - Suppliers, Customers and Regulators • Customer Loss • Brand Name or Reputation damage • Investor/Stock Market confidence loss…. • Not all these can be measured financially but all will have an effect on the companies bottom line….

6. Cost of Downtime by Industry Sector Source: Meta Group, 10/2000

7. Other Considerations • Its not just Incidents on the scale of September 11th that can impact your business…. • ASX - Australian Stock Exchange - Failed Software Upgrade - 2 Hrs • Virus Attacks • Yahoo • eBay • CCN • AOL • London Stock Exchange - Human Error - Online trading system down all day

8. Your critical data needs to be protected from: • Human error or sabotage • Feb ‘00 - DDoS attacks against eBay, Amazon and Yahoo • Data corruption • Hardware failures • Sept 00’- Power Outage at an airlines main operations centre played havoc with computers that control air traffic, delaying or affecting 300-400 flights across the US. • Software glitches • Advanced Notice (Planned) Outages • Sudden (Rolling) Disasters • Lingering (Duration) Outages

9. Terminology • Risk Analysis • Identification of threats • Business Impact Analysis • Establish Value, identify critical resources, establish priority • Recovery Time Objective • Time within which Business Functions or Applications must be restored. • Includes time before disaster declared and time to perform tasks • Recovery Point Objective • The Point in time to which data must be restored to successfully resume processing • Often thought off as time between last backup and when outage occurred

10. Where Are You Today • Have you recently conducted • BIA, Risk Analysis, Critical records analysis • Correlate Cost vs. Risk • Cost • Cost of Re-Creating data and transactions • Cost of Technologies - storage, network, platforms • Re-engineering costs associated with infrastructure refresh • Risk • Likelihood of event • Cost of downtime ( monetary and reputation) • regulatory/legal penalties for non-compliance • Competitive (dis)advantages

11. Some Considerations to Start • Solution must meet your goals and objectives • Realistic Expectations need to be set • The Business need will be defined by things like the BIA and Risk Analysis • Subject expertise • What groups/departments are involved • Network, Auditing, Business line • Look at educating different groups within your organization so they better understand some of the issues

12. Traditional Disaster Recovery Timeline 6 12 2 24 23 Restore Network Load On-Line Databases Forward recover On-Line Files with Transaction Journals Activate Recovery Site Start On-Lines Batch Cycle-Load Application batch files IPL and synchronize operating systems Begin Staging Applications for First Day 24 + Hours- Applications start and continue processing integrated cycles until batch cycles with calendar Date

13. Advanced Disaster Recovery • Electronic Vaulting • Files transmitted on a regular basis • Remote Journaling • Remote Mirroring • Real-Time Remote Copy • Hot Standby Site • Active/Active Sites (Clustering, GDPS)

14. Some More terminology • Real Time Copy • Refers to the mirroring of data, • Should provide an IO consistent copy of that data. • Every Update is Replicated  • Point-in-Time Copy (PiT) • refers to a copy of data that that is taken at a specific point in time. Ideally this copy should be IO consistent. • PiT copies are used in many ways including backups and checkpoints. • More recently PiT copies are used as part of architected disaster recovery solutions. • NanoCopy

15. Disaster Recovery Tiers: Definitions • Tape Back-Up – A Point-in-Time back-up is made to tape and sent off-site. • Available System – System must be available at time of incident • Remote Logging – Either to Tape or Disk • Active System – System is available and software is loaded, ready to run and is often required to run software such as HXRC • Recovery Time Objective (RTO)– Time to resume operation at secondary IT facility… this is the duration of the service interruption. • Recovery Point Objective(RPO) – Worst case time between last back-up and interruption time.

16. Different Types of Data Require Different Levels of Protection Data Audit Required to Assess Business Criticality, and Cost to Recover Diversity in Data Protection Requirements Completely Duplicated/ Interconnected hot-site Remote Disk Mirroring More Disk Mirroring Shared Disk Disk Consolidation Single Disk Copy Electronic Vaulting Importance of Data Tape On-site Tape Back-up Off-site (trucks) More Amount of Data Less Immediate Recovery Time Less Delayed

17. Recovery Tiers – What is the right one • There is no wrong one • More important is meeting the objectives • Have you other options other than Real-Time replication • If you have a 24 hour RPO you may not need it • The higher the tier, typically the greater the cost and complexity • Combinations or hybrids may be appropriate

18. Considerations when Architecting Continuous Business Solutions • Planning, Planning Planning • Document, Document, Document • Solutions must accommodate multiple environments and Businesses • What is the right solution • software, hardware, real-time, PiT, multiple • Careful analysis is required • Application types, amount of data • Performance requirements, remote site location • Transmission capability/cost • What are the future requirements

19. Solution Design • Detailed Assessment Typically Required • Questionnaire/Interviews • Planning Session • Performance data • Data Analysis • How Much, Where, Placement • Current Infrastructure • Will need to match goals and objectives along the the cost • Customers may have to consider reengineering of applications or placement of data • May take a couple of iterations and customer feedback before final design

20. Real-Time Mirroring Technologies • Options for Consideration • Synchronous Remote Copy • Asynchronous Remote Copy • Hardware based • Software Based • Log Replication • Application Level Copy • All are Viable • Depends on Many Factors • Performance, Cost, type of data, platform etc.

21. And it doesn't end there • Make sure you have a Baseline • Change control is critical • Impact must be carefully considered • Procedures need to be up to date • Ongoing monitoring of environment • Network • Subsystem response time • Disaster Recovery Testing • Frequency • Document and fix

22. More Real World It’s Only Swapping Beanie Babys & Fiesta Ware • “A 22-hour Blackout … Cost Ebay up to $5 Million in Forgone Revenue and a $4 Billion Slide in Market Value, and” Two Weeks Later “Not Yet Fully Recovered.” Forbes, July 26 1999 • Ebay’s eProfile: • Over 2 Million Items Tracked • 300,000 Additions a Day • 1 Million Visitors a Day • 600 Bids a Minute The June 10th Crash Damaged Ebay’s Reputation and Caused a 26% Plunge in Stock Price by June 14th.

23. Thank You Questions?