COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared Brian Bowman Senior Solution Engineer
COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Brian BowmanSenior Solution Engineer
© 2007 Progress Software Corporation2 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Agenda
Introduction The Bad News Defining Disasters The Good News
© 2007 Progress Software Corporation3 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Introductory Thought
© 2007 Progress Software Corporation4 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Introduction
Doom & Gloom Always the pessimist The glass is half empty…
Goals• Provide you with a complete look at BC
• Allow you to quantify / qualify what you can (& can’t) do
© 2007 Progress Software Corporation5 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Agenda
Introduction The Bad News Defining Disasters The Good News
© 2007 Progress Software Corporation6 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Avian Flu Status – as of 20 May 2007 (7)
Phase 3 291 Human Cases Reported 172 Deaths (mortality rate: 59%) Infected animals reported in 61 countries
CDC predicts that 30 – 50% of American workers will be out for a minimum of 6 weeks
© 2007 Progress Software Corporation7 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
FEMA Status
26 disasters reported in USA thus far in 2007 52 disasters reported in all of 2006 Hurricane season started 13 days ago
http://www.FEMA.gov
© 2007 Progress Software Corporation8 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Federal Disasters 2000 - 2007
© 2007 Progress Software Corporation9 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Current World Health Organization (WHO) Status
Countries with Crises / Emergencies (20 May 2007)Afghanistan, Angola, Botswana, Burkina Faso, Burundi,
Central African Republic (CAR), Chad, China, Colombia, Democratic Republic of the Congo, Republic of Congo, Cote d’Ivoire, Djibouti, Eritrea, Ethiopia, Ghana, Guinea, Haiti, India, Indonesia, Islam Republic of Iran, Iraq, Kenya, Lebanon, Lesotho, Liberia, Malawi, Mozambique, Niger, Nepal, Pakistan, Philippines, Russian Federation – Chechnya, Rwanda, Sierra Leone, Solomon Islands, Somalia, South Africa, Sri Lanka, Sudan, Swaziland, Tajikistan, Tanzania, Timor-Leste, Uganda, Venezuela, Zambia, Zimbabwe
© 2007 Progress Software Corporation10 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Agenda
Introduction The Bad News Defining Disasters The Good News
© 2007 Progress Software Corporation11 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Disaster Categories
Acts of Nature Acts of Man Man-made Infrastructural Organizational
© 2007 Progress Software Corporation12 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Acts of Nature
Flood, Fire, Tornadoes, Hurricanes, Earthquakes, Winter Storms, Electrical Storms, Wildfires, Flooding
Earthquakes within the last 8 - 30 days (20 May 2007) (3)
© 2007 Progress Software Corporation13 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Man-made - Individual
Intentional acts of disruption perpetrated by one individual
Examples: computer hacking, loss of records, unauthorized access, white collar crime, workplace violence, espionage, intellectual property theft
Enron, Tyco, Parmalat, …
© 2007 Progress Software Corporation14 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Threat Example: Intellectual Property
“ International trade losses due to product counterfeiting and piracy are much lower than estimated… losses in 2005 were “up to $200bn”” (1)
“…where more than 90 percent of all software is illegal. The US has the lowest rate worldwide at 22 per cent,…” (2)
© 2007 Progress Software Corporation15 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Threat Example: Workplace Violence
1 out of 4 workers have been attacked or harassed
Number of people attacked in the last year: 2 million Number of people threatened: 6.3 million Number of people harassed: 16.1 million 21% said a co-worker had been threatened with physical harm
in the past year. (4)
© 2007 Progress Software Corporation16 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Man-made - Group
Larger scale Incidents of disruption such as strikes, violence, warfare, terrorism, civil disobedience
Examples: negative publicity, labor disputes, legal problems, transportation disruptions, civil unrest
© 2007 Progress Software Corporation17 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Threat Example: Country Risk Assessment (CRA)
Political• Wars, revolutions, coups
Economic Financial Labor
• Low productivity, militant unions
Legal• Laws may be changed
Terrorism
Types of Country Risks
© 2007 Progress Software Corporation18 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Infrastructure Disruption
Threats to the infrastructure that can cause a business to stop functioning
Examples: delivery malfunctions, environmental hazards, power outages, medical emergencies, virus attacks, biological hazards, computer failure, computer viruses, power outages, supply chain problems, loss of site access…
© 2007 Progress Software Corporation19 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Power Outage Solution
© 2007 Progress Software Corporation20 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Organizational Disruption
Mergers and Acquisitions, Reduction in Workforce, Staffing issues, Succession Planning, Business relocation
Examples: Flexibility / agility to add new company, H5N1 staff reduction, expansion to China
© 2007 Progress Software Corporation21 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Agenda
Introduction The Bad News Defining Disasters The Good News
© 2007 Progress Software Corporation22 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Your Existing Plan
Do you have one?• Is it comprehensive?
• Where did the Risk analysis come from?
• Does it meet the business needs?
Do you throw out what you have and start over?
Can you salvage anything?
© 2007 Progress Software Corporation23 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Measuring Risk - Definition
Risk - a potential negative impact to an asset or some characteristic of value that may arise from some present process or future event…
© 2007 Progress Software Corporation24 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Risks in Our World
Costs• What are the costs associated with a risk?
What are the chances of it happening? Can the risk be eliminated and managed?
It is perfectly acceptable to accept risk – as long as it is measurable and known.
© 2007 Progress Software Corporation25 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
The Risk Process
IdentifyControl
Anal
yze
Plan
Track
Document &
Communicate
© 2007 Progress Software Corporation26 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Probability
High ImpactLow probability
High ProbabilityLow Impact
Impact
Risk Assessments – where to focus
High
Low
Low
High
© 2007 Progress Software Corporation27 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Charting Risks on the Graph
Disk failure Risk Loss of Power Virus Loss of Key Personnel AppServer Crash
© 2007 Progress Software Corporation28 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Probability
High ImpactLow probability
High ProbabilityLow Impact
Impact
Risk Assessments – where to focus
High
Low
Low
High
PreventData Loss
Loss ofPower Virus
Disk Loss
Loss of DBA
AppServerCrash
© 2007 Progress Software Corporation29 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Figuring out what you missed…
Resources to look into it• Local Resources
• State / Provincial / Regional Resources
• Country-based Resources
• Region-based Resources
• International Resources
© 2007 Progress Software Corporation30 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
What else did you miss…
Looking at similar companies• In another region
• In a parallel business line
Industry Associations Professional Societies
© 2007 Progress Software Corporation31 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Additional Help…
3rd party assistance• Consulting
• Professional Agencies & Associations (DRI, BCI, etc.)
© 2007 Progress Software Corporation32 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Options Available to you
Progress Software Options 3rd party options Consulting Options Home-grown Options
© 2007 Progress Software Corporation33 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Progress Options
Are you on the latest version? Backups!!!! After-Imaging OpenEdge® Replication Failover Clusters Application Server Load Balancing &
Availability Sonic CAA
© 2007 Progress Software Corporation34 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
3rd Party Options
SRDF Replication / Snapshots Clustering “Pick your Vendors Solution…”
© 2007 Progress Software Corporation35 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Home Grown
ABL Triggers – Data Backups AI management – roll forward
© 2007 Progress Software Corporation36 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Consulting Options
Custom built solutions Assistance in assessing, developing, and
executing a plan
© 2007 Progress Software Corporation37 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Summarizing Risk
Identify Analyze Plan Track Control
DOCUMENT EVERYTHING!!!!!
© 2007 Progress Software Corporation38 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
An Important Thought
Can you run the application without the database?
What use is the database without the application infrastructure? • What value does it bring?
Can you run the application without the infrastructure?
What does the business need?
You must look at the complete application!
Which is more important – the database or the application?
© 2007 Progress Software Corporation39 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Summary
There are lots of bad things in the world… There are lots of options to make things
better… Figure out
• What you should worry about
• What you shouldn’t worry about
• What you can prepare for
• What you can’t prepare for
Design, Plan, and EXECUTE!
© 2007 Progress Software Corporation40 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
A Final Thought…
© 2007 Progress Software Corporation41 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Where to go from here
Other Exchange sessions:• COMP-10 OpenEdge Management and Replication –
Divide et impera!
• DB-2 OpenEdge Replication – How to Get Home in Time…
PSDN• http://www.psdn.com/library/kbcategory.jspa?categoryI
D=555
• Whitepapers!
Professional Services for assistance
© 2007 Progress Software Corporation42 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Questions?
© 2007 Progress Software Corporation43 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
References
(1) “Forgery trade losses ‘under $200bn’ By Hugh Williamson in Berlin, http://www.ft.com/cms/s/acbd064c-fcb9-11db-9971-000b5df10621.html, extracted :17 May 2007
(2) “Attacking the pirates”, by Alan Cane, Ft.com Web Site, http://search.ft.com/ftArticle?queryText=Intellectual+Property+Losses&y=2&aje=true&x=12&id=070228004463&page=3, extracted: 17 May 2007
(3) “Earthquakes in the last 8 – 30 days”, http://neic.usgs.gov/neis/qed/, extracted: 20 May 2007
(4) “Workplace Violence”, http://www.dps.siu.edu/cp_workplace_violence.htm, extracted: 20 May 2007
(5) “Workplace Violence in 2005”, http://www.bls.gov/opub/ted/2006/oct/wk5/art01.htm, extracted: 20 May 2007
(6) “5 Risks That Could Sink Your Company”, Tonya Vinas & Jill Jusko, Industry Week. Cleveland: Sept. 2004. Vol. 253, Issue 9, p. 52-61 (6 pp.)
(7) http://www.who.int/csr/disease/avian_influenza/country/cases_table_2007_04_11/en/index.html
http://www.oie.int/downld/AVIAN%20INFLUENZA/A_AI-Asia.htm
© 2007 Progress Software Corporation44 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared
Thank you for your time!
© 2007 Progress Software Corporation45 COMP-15: Disaster Recovery Planning: Be Scared, Be Very Scared