Business Continuity Technology

1. Business ContinuityTechnology Peter Lesser lesser@kkl.com (212) 692-5617 Kraft Kennedy & Lesser, Inc. 360 Lexington Avenue New York, NY 10017

2. Agenda • Kraft Kennedy & Lesser • Business Continuity Planning • Business Continuity Technology • Q & A

3. Kraft Kennedy & Lesser • Founded in 1988 • Dedicated to legal community • Consulting • Systems Integration • Offices in New York, Houston and San Francisco • 50+ Consultants

4. Kraft Kennedy & LesserRepresentative Clients

5. BUSINESS CONTINUITYPLANNING

6. Business ContinuityPlanning • Facilities • Human Resources • Information

7. Facilities • National Office • Critical Firm Functions • Space • Local Offices • Critical Office Functions • Space

8. Human Resources • National Office Emergency Management Team Manual • Local Office Emergency Management Team Manual • Local Office Emergency Preparedness Employee Manual

9. Information • Current storage locations • Paper • Desk-side files • Office Records Centers • Office safes • Off-site storage vendors • Electronic • Messaging • Document Manage • Various Systems • Protection mechanisms • Off-Site Storage • Image critical documents • Technology

10. BUSINESS CONTINUITYTECHNOLOGY PLANNING

11. Mission To create systems redundancies which aim to eliminate interruptions in service attributable to: • Data center component failure • Data center facility failure • Communications link failure • Building becomes temporarily or permanently inaccessible

12. Assumptions The plan directs investments toward protecting firm applications deemed most critical. Critical applications are defined as those which pose the most risk to firm operations should they become unavailable for any period of time. They are: • Messaging • Document Management and Document Processing • Time Entry • Litigation Systems • Contact Management • Conflicts The remaining less critical applications will be restored as needed if an outage is determined to be long-term.

13. Current Capabilities Standard law firm practices. The firm’s data centers are protected by: • Fire control systems • Temperature control systems • Physical security systems • Uninterruptible power supplies Hardware components are protected by: • Duplicate power supplies • Duplexed/RAID hard drives • Redundant Internet access communications facilities Firm data is protected by tape backup procedures and data is regularly moved to off site storage. No real time ability to utilize that data in case of systems failure.

14. Strengths & Weaknesses of Current System Architecture Advantages: • Systems are decentralized. Failure in one office does not affect the rest of the Firm. • Systems are not dramatically affected by local communications failures. Disadvantages: • Minimal system redundancy. • Vulnerable to local system and power outages. • Firm data is protected by tape backup only. • No real time ability to utilize data in case of system failure. • Maximum of days to weeks of downtime and 24 hours of data loss.

15. Availability & Disaster Recovery Goals

16. Management Goals • Cost Containment • Reduce Systems Management Effort • Improve Consistency • Reduce Infrastructure Upgrade Effort • Reduce Time to Support New Applications • Reduce Time to Establish and Support New Locations

17. Options for increased capabilities • Implement local high availability technologies. • Establish current data centers as “hot-sites” for each other. • Establish disaster recovery hot-site. • Relocate technology infrastructure to redundant off-site data centers.

18. Advanced High Availability Technologies • Environmental Protection • Hardware Component Redundancy • Clustering • Storage • Thin Client • Virtualization • Consolidation • Centralization • Caching • Replication • Backup

19. Internal Hot-Sites Advantages: • Allows for rapid recovery. • Leverages existing firm locations. • Reduces space required for some data centers. • Reduces efforts for some systems upgrades. Disadvantages: • Need to acquire significant additional space in primary locations. • Existing locations do not have ideal facilities. • Does not fully leverage economies of consolidation. • Requires distributed high level IT staff. • Solution is most disruptive to implement. • Solution is most time consuming to complete. • Must invest in redundant communications links from small offices to consolidated data centers.

20. Disaster Recovery Hot-Site Advantages: • Protects multiple offices from disaster in any single location. • Hot-site is easily scaled to backup addition applications or locations. • No reliance on communications for normal operations. Disadvantages: • Does not provide full systems recovery. • Does not protect from component failure. • Does not leverage economies of consolidation. • Requires large distributed IT staff. • Solution is disruptive to implement.

21. Redundant Off-Site Data Centers Advantages: • Allows for rapid recovery. • Reduces space required for in office data centers. • Allows data centers to be located in less expensive locations. • Allows data centers to be located in buildings with enhanced facilities. • Increases in DR protection are realized during implementation process. • Allows for IT staff consolidation. • Allows for simplification of systems design. • Dramatically reduces efforts for systems upgrades. • Dramatically reduces time to support new locations. • Requires smallest amount of hardware and software. • Solution is least disruptive to implement. Disadvantages: • Must invest in redundant communications links from all offices to data center locations. 

22. Recommendations

23. BUSINESS CONTINUITYTECHNOLOGY

24. Environmental Protection • HVAC • Fire Suppression • Water Detection • Uninterruptible Power Supply • Generator • Access Security

25. Hardware Component Redundancy • Power Supplies • Fans • Memory (Parity/Chipkill) • NICs • HBAs • Disk Drives • LAN Switches • Backbone Cable • Riser Shafts

26. Clustering • Fault Tolerant Hardware • Operating System Clustering • Application Clustering

27. Storage • Tape • Local Storage • NAS • SANs • SCSI • FC • iSCSI • Boot from SAN

28. Thin Client • Windows Terminal Server • Citrix • Browser

29. Virtualization • VMware • Microsoft • HW Partitioning • OS Partitioning

30. Consolidation • Blade Servers • Clusters • Virtual Servers • Server Consolidation • Minimize Support Efforts • Improved Realization of Availability Costs

31. Centralization • Reduced Number of Servers • Reduced Storage Overlap • Centralized Support • Simplified Replication

32. Caching • Messaging • Document Management • Supports Users Remote from Systems • Supports Centralization • Supports Consolidation

33. Replication • Data Redundancy • Minimal Value without Systems • Minimal Value without Access • Operating Systems • SAN to SAN • Dedicated Communications vs. IP • Bandwidth Required

34. Backup • Disk to Disk/Virtual Tape • Three Tier • Tape Libraries • On-Line • Backup at Secondary Site

35. Wide Area Network • Technology • Traditional • IP • Fiber • Performance • Bandwidth • Latency • Diversity • WAN carrier • Local Exchange carrier • Point of entry (as possible) • Inside wiring • Managed Service

36. Questions&Answers