Welcome!

Cloud Expo Authors: Roger Strukhoff, Bernard Golden, Greg Ness, Elizabeth White, Carmen Gonzalez

Related Topics: Cloud Expo, Java, SOA & WOA, Linux, Security, Big Data Journal

Cloud Expo: Article

A Business Continuity Plan Plus the Right Cloud Solution

The Perfect Equation for Disaster Proofing

It's an oft-cited FEMA statistic that 40 percent of small businesses never reopen after a disaster. Almost certainly contributing to this eye-popping failure rate is the fact that an estimated 74 percent of small to mid-sized businesses (SMBs) lack a disaster recovery plan, while 84 percent haven't bothered to obtain disaster insurance.

On an annual basis, flooding ranks as the most common and costly type of natural disaster in America. This hurricane season alone is expected to boast 10 named tropical storms and five hurricanes. Those SMBs that don't want their data to wash away with the rest of their possessions should consider revisiting the planning process, strategies, and cloud technologies that help businesses stay afloat in the event of a disaster.

Be Proactive - Planning Improves Reaction Time and Outcomes
Most businesses naively believe that they won't experience a true disaster, or that they'll just cross that bridge when in happens. However, according to the Aberdeen Group, disaster is arguably inevitable with the average business experiencing 2.26 downtime events per year, at an average cost of $163,674. Since all businesses aren't created equal, and many are constrained by dollars and cents, businesses must carefully calibrate their strategy for response to be commensurate with their risk. A well thought out business continuity and disaster recovery plan that takes into account the following six steps can make all the difference between a business that is poised for continued success, and one that is done in by something going awry:

Step 1: Identify mission-critical applications and data by performing a risk assessment and business impact analysis (BIA) as well as taking an asset inventory. This analysis will allow the business to calculate the potential impact of its most likely threats and prioritize their response accordingly.

Step 2: Estimate when operations should/will resume by measuring success against established RTO/RPO through frequent testing to ensure flexibility in the disaster recovery technology solution(s) the business chooses. Companies should keep in mind that, while accurate RTO/RPOs are easy to attain with specific systems, they are very hard to meet when data becomes more agnostic and distributed across more systems.

Step 3: Identify a backup worksite in the event the business becomes unsafe.

Step 4: Design and publish the business continuity plan/disaster recovery plan (BCP/DRP), making sure it is accessible to everyone from anywhere.

Step 5: Make sure employees know about the plan and are familiar with it. When disaster strikes, businesses with a clearly defined plan and consistent communication can more quickly cut through the chaos and get back on track.

Step 6: Businesses should regularly put their BCP/DRP to the test to ensure it meets current and future needs, and to expose areas that can be updated for improvement. With the maturity of cloud solutions, you also have to take into account migrating and living with a more diverse private/public cloud portfolio. Ensure you have a go-to plan for the future to expand into new things like high availability, and archiving within clouds.

Disaster-Proofing Strategies & Technologies for Every Situation and Budget
First, let's get one thing out of the way: tape is not a recovery solution. With the dizzying pace of innovation, today's modern business continuity and disaster recovery solutions available in the cloud have proliferated almost beyond count. This is making it challenging for a business to hone in on the right solutions, so let's take a quick look at some solutions that can fit various needs and budgets.

Community Cloud
In the SMB market, one strategy we are increasingly seeing is "community cloud" initiatives, which allow businesses to share risk and pool resources to stretch their dollars. For instance, through a mutual agreement, two companies in the same region could house one of their servers in the other's data center. Thus, rather than having to set up, manage, and pay for a duplicate data center, the companies are each afforded off-site protection. However, in event of a regional disaster, such as a storm, each of the sites might be subject to identical threats.  Therefore, this option should be reserved for businesses with shoestring budgets, in areas that face low regional threat risk.

Cloud-Based Disaster Recovery as a Service (DRaaS)
The emergence of cloud-based DRaaS over the past few years has been a game-changer for businesses of all sizes and budgets. DRaaS solutions can enable complete recovery of data and entire production environments in minutes - not hours or days. On a predetermined basis, a company's physical and/or virtual servers send images of their environments to the cloud of a DRaaS provider. In the event of an adverse event at the company's site, such as a storm or fire, a virtualized (and fully-operational) version of the physical server can be rapidly spun-up in the DRaaS cloud. Additionally, the affordability of DRaaS is attractive as it doesn't require capital investment and even some appliance-based solutions are offered as Hardware as a Service.

Despite its abundant benefits, though, DRaaS still doesn't solve the age-old problem of "what" a business needs to protect unless it's set up manually by default. Moreover, while advances in WAN Optimization equate to more rapid transfer of data to the cloud, there are still some bandwidth issues.

Hybrid Cloud Solutions
Hybrid cloud solutions are bursting onto the market and freeing applications from the need to be tied to a physical piece of hardware. They enable applications to live both locally, as well as in a cloud environment, at the same time. These hybrid solutions mean businesses don't have to DIY for their own disaster recovery sites and can instead designate a cloud provider to provide the infrastructure

In turn, these cloud vendors can achieve efficacies of scale and performance rarely seen with individual operators. For a small number of application-centric situations, such as finance institutions, this won't be the best solution. But for almost any other business, it leaves no reason not to move disaster recovery to the cloud.

Multi-Cloud Solutions
The disaster recovery landscape continues to evolve at a breakneck pace and very soon businesses will have the ability to operate between many clouds and avoid being locked down by just one. For instance, companies can now choose solutions that enable virtual and physical loads to be recovered inside multiple cloud providers and even orchestrate cascading failovers between different providers. This freedom essentially enables businesses to place their recovery eggs in multiple baskets. In the distant future, we can logically surmise that businesses will one day be able to move between cloud providers on a whim by simply pushing a button and failing over on top of another cloud platform.

Choosing the Right Solution
Businesses can narrow their search a bit further by choosing universal products that address their basic need around recovery (failover/failback) while being as agnostic to hardware and software as possible. At the same time, they should expand their horizons and look for application-centric solutions that enable them to focus on what matters: the actual data that drives their business. Any company that maintains a business continuity plan and implements the right cloud technology to meet their needs is well on the path to saving itself from becoming another morbid statistic the next time disaster strikes.

More Stories By Fredrik Schmidt

Fredrik Schmidt serves as the Head of Product and Innovation at Accelerite where he specializes in high performance computing, virtualization, security, storage management, business continuity management, datacenter transformation practices, and the cloud.

Fredrik joined Accelerite after serving as Technical Director at Symantec where he held a superior record of delivering simultaneous large-scale, mission-critical projects on time and under budget. Prior to Symantec, he’s operated as a Senior IT/IS Director at Thompson Multimedia and CIO and Co-Founder of Kryptonite Security, an LLC company engaged in Fortune 500 company security consulting. During his career, he's worked on several Big Data initiatives, revamped “code as a service' with the State of California, and executed the first state level Cloud-based initiative in the country which laid foundation for several high profile efforts currently underway.

Fredrik has strong knowledge of all components of IT operations and industry-standard technologies as well as service delivery. His is also fluent in Swedish, Norwegian, Danish, French, German and Japanese.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@CloudExpo Stories
Samsung VP Jacopo Lenzi, who headed the company's recent SmartThings acquisition under the auspices of Samsung's Open Innovaction Center (OIC), answered a few questions we had about the deal. This interview was in conjunction with our interview with SmartThings CEO Alex Hawkinson. IoT Journal: SmartThings was developed in an open, standards-agnostic platform, and will now be part of Samsung's Open Innovation Center. Can you elaborate on your commitment to keep the platform open? Jacopo Lenzi: S...
The major cloud platforms defy a simple, side-by-side analysis. Each of the major IaaS public-cloud platforms offers their own unique strengths and functionality. Options for on-site private cloud are diverse as well, and must be designed and deployed while taking existing legacy architecture and infrastructure into account. Then the reality is that most enterprises are embarking on a hybrid cloud strategy and programs. In this Power Panel at 15th Cloud Expo, moderated by Ashar Baig, Research ...
In her General Session at 15th Cloud Expo, Anne Plese, Senior Consultant, Cloud Product Marketing, at Verizon Enterprise, will focus on finding the right mix of renting vs. buying Oracle capacity to scale to meet business demands, and offer validated Oracle database TCO models for Oracle development and testing environments. Anne Plese is a marketing and technology enthusiast/realist with over 19+ years in high tech. At Verizon Enterprise, she focuses on driving growth for the Verizon Cloud pla...
StackIQ offers a comprehensive software suite that automates the deployment, provisioning, and management of Big Infrastructure. With StackIQ’s software, you can spin up fully configured big data clusters, quickly and consistently — from bare-metal up to the applications layer — and manage them efficiently. Our software’s modular architecture allows customers to integrate nearly any application with the StackIQ software stack.
As Platform as a Service (PaaS) matures as a category, developers should have the ability to use the programming language of their choice to build applications and have access to a wide array of services. Bluemix is IBM's open cloud development platform that enables users to easily build cloud-based, creative mobile and web applications without having to spend large amounts of time and resources on configuring infrastructure and multiple software licenses. In this track, you will learn about the...
The Internet of Things will greatly expand the opportunities for data collection and new business models driven off of that data. In her session at Internet of @ThingsExpo, Esmeralda Swartz, CMO of MetraTech, will discuss how for this to be effective you not only need to have infrastructure and operational models capable of utilizing this new phenomenon, but increasingly service providers will need to convince a skeptical public to participate. Get ready to show them the money! Speaker Bio: ...
Compute virtualization has been transformational, yet security policy implementation and enforcement has lagged behind in agility and automation. There are a number of key considerations when implementing policy in private and hybrid clouds. In his session at 15th Cloud Expo, Holland Barry, VP of Technology at Catbird, will discuss the impact of this new paradigm and what organizations can do today to safely move to software-defined network and compute architectures, including: How normal ope...
How do APIs and IoT relate? The answer is not as simple as merely adding an API on top of a dumb device, but rather about understanding the architectural patterns for implementing an IoT fabric. There are typically two or three trends: Exposing the device to a management framework Exposing that management framework to a business centric logic • Exposing that business layer and data to end users. This last trend is the IoT stack, which involves a new shift in the separation of what stuff hap...
SYS-CON Events announced today that SOA Software, an API management leader, will exhibit at SYS-CON's 15th International Cloud Expo®, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. SOA Software is a leading provider of API Management and SOA Governance products that equip business to deliver APIs and SOA together to drive their company to meet its business strategy quickly and effectively. SOA Software’s technology helps businesses to accel...
SYS-CON Events announced today that Utimaco will exhibit at SYS-CON's 15th International Cloud Expo®, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Utimaco is a leading manufacturer of hardware based security solutions that provide the root of trust to keep cryptographic keys safe, secure critical digital infrastructures and protect high value data assets. Only Utimaco delivers a general-purpose hardware security module (HSM) as a customiz...
Almost everyone sees the potential of Internet of Things but how can businesses truly unlock that potential. The key will be in the ability to discover business insight in the midst of an ocean of Big Data generated from billions of embedded devices via Systems of Discover. Businesses will also need to ensure that they can sustain that insight by leveraging the cloud for global reach, scale and elasticity.
SYS-CON Events announced today that ElasticBox is holding a Hackathon at DevOps Summit, November 6 from 12 pm -4 pm at the Santa Clara Convention Center in Santa Clara, CA. You can enter as an individual or team of up to 10 developers. A New Star Is Born Every Month! All completed ElasticBoxes will then be sent to a judging panel - 12 winners will be featured on the ElasticBox website in 2015. All entrants will receive five full enterprise licenses for one year + ElasticBox headphones + Elasti...
Once the decision has been made to move part or all of a workload to the cloud, a methodology for selecting that workload needs to be established. How do you move to the cloud? What does the discovery, assessment and planning look like? What workloads make sense? Which cloud model makes sense for each workload? What are the considerations for how to select the right cloud model? And how does that fit in with the overall IT tranformation? In his session at 15th Cloud Expo, John Hatem, head of V...
Cloud services are the newest tool in the arsenal of IT products in the market today. These cloud services integrate process and tools. In order to use these products effectively, organizations must have a good understanding of themselves and their business requirements. In his session at 15th Cloud Expo, Brian Lewis, Principal Architect at Verizon Cloud, will outline key areas of organizational focus, and how to formalize an actionable plan when migrating applications and internal services to...
SAP is delivering break-through innovation combined with fantastic user experience powered by the market-leading in-memory technology, SAP HANA. In his General Session at 15th Cloud Expo, Thorsten Leiduck, VP ISVs & Digital Commerce, SAP, will discuss how SAP and partners provide cloud and hybrid cloud solutions as well as real-time Big Data offerings that help companies of all sizes and industries run better. SAP launched an application challenge to award the most innovative SAP HANA and SAP ...
Ixia develops amazing products so its customers can connect the world. Ixia helps its customers provide an always-on user experience through fast, secure delivery of dynamic connected technologies and services. Through actionable insights that accelerate and secure application and service delivery, Ixia's customers benefit from faster time to market, optimized application performance and higher-quality deployments.
SYS-CON Events announced today that Calm.io has been named “Bronze Sponsor” of DevOps Summit Silicon Valley, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Calm.io is a cloud orchestration platform for AWS, vCenter, OpenStack, or bare metal, that runs your CL tools puppet, Chef, shell, git, Jenkins, nagios, and will soon support New Relic and Docker. It can run hosted, or on premise and provides VM automation / expiry, self-service portals,...
SYS-CON Events announced today that Aria Systems, the recurring revenue expert, has been named "Bronze Sponsor" of SYS-CON's 15th International Cloud Expo®, which will take place on November 4-6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Aria Systems helps leading businesses connect their customers with the products and services they love. Industry leaders like Pitney Bowes, Experian, AAA NCNU, VMware, HootSuite and many others choose Aria to power their recurring revenue bu...
The Internet of Things (IoT) is going to require a new way of thinking and of developing software for speed, security and innovation. This requires IT leaders to balance business as usual while anticipating for the next market and technology trends. Cloud provides the right IT asset portfolio to help today’s IT leaders manage the old and prepare for the new. Today the cloud conversation is evolving from private and public to hybrid. This session will provide use cases and insights to reinforce t...
Blue Box has closed a $10 million Series B financing. The round was led by a strategic investor and included participation from prior investors including Voyager Capital and Founders Collective, as well as the Blue Box executive team. This round follows a $4.3 million Series A closed in December of 2012 and led by Voyager Capital. In May of this year, the company announced general availability of its private cloud as a service offering, Blue Box Cloud. Since that release, the company has dem...