Click here to close now.

Welcome!

CloudExpo® Blog Authors: Liz McMillan, Elizabeth White, Rex Morrow, Datical, Lori MacVittie, Pat Romanski

Related Topics: CloudExpo® Blog, Java IoT, @MicroservicesE Blog, Linux Containers, Cloud Security, BigDataExpo® Blog

CloudExpo® Blog: Article

A Business Continuity Plan Plus the Right Cloud Solution

The Perfect Equation for Disaster Proofing

It's an oft-cited FEMA statistic that 40 percent of small businesses never reopen after a disaster. Almost certainly contributing to this eye-popping failure rate is the fact that an estimated 74 percent of small to mid-sized businesses (SMBs) lack a disaster recovery plan, while 84 percent haven't bothered to obtain disaster insurance.

On an annual basis, flooding ranks as the most common and costly type of natural disaster in America. This hurricane season alone is expected to boast 10 named tropical storms and five hurricanes. Those SMBs that don't want their data to wash away with the rest of their possessions should consider revisiting the planning process, strategies, and cloud technologies that help businesses stay afloat in the event of a disaster.

Be Proactive - Planning Improves Reaction Time and Outcomes
Most businesses naively believe that they won't experience a true disaster, or that they'll just cross that bridge when in happens. However, according to the Aberdeen Group, disaster is arguably inevitable with the average business experiencing 2.26 downtime events per year, at an average cost of $163,674. Since all businesses aren't created equal, and many are constrained by dollars and cents, businesses must carefully calibrate their strategy for response to be commensurate with their risk. A well thought out business continuity and disaster recovery plan that takes into account the following six steps can make all the difference between a business that is poised for continued success, and one that is done in by something going awry:

Step 1: Identify mission-critical applications and data by performing a risk assessment and business impact analysis (BIA) as well as taking an asset inventory. This analysis will allow the business to calculate the potential impact of its most likely threats and prioritize their response accordingly.

Step 2: Estimate when operations should/will resume by measuring success against established RTO/RPO through frequent testing to ensure flexibility in the disaster recovery technology solution(s) the business chooses. Companies should keep in mind that, while accurate RTO/RPOs are easy to attain with specific systems, they are very hard to meet when data becomes more agnostic and distributed across more systems.

Step 3: Identify a backup worksite in the event the business becomes unsafe.

Step 4: Design and publish the business continuity plan/disaster recovery plan (BCP/DRP), making sure it is accessible to everyone from anywhere.

Step 5: Make sure employees know about the plan and are familiar with it. When disaster strikes, businesses with a clearly defined plan and consistent communication can more quickly cut through the chaos and get back on track.

Step 6: Businesses should regularly put their BCP/DRP to the test to ensure it meets current and future needs, and to expose areas that can be updated for improvement. With the maturity of cloud solutions, you also have to take into account migrating and living with a more diverse private/public cloud portfolio. Ensure you have a go-to plan for the future to expand into new things like high availability, and archiving within clouds.

Disaster-Proofing Strategies & Technologies for Every Situation and Budget
First, let's get one thing out of the way: tape is not a recovery solution. With the dizzying pace of innovation, today's modern business continuity and disaster recovery solutions available in the cloud have proliferated almost beyond count. This is making it challenging for a business to hone in on the right solutions, so let's take a quick look at some solutions that can fit various needs and budgets.

Community Cloud
In the SMB market, one strategy we are increasingly seeing is "community cloud" initiatives, which allow businesses to share risk and pool resources to stretch their dollars. For instance, through a mutual agreement, two companies in the same region could house one of their servers in the other's data center. Thus, rather than having to set up, manage, and pay for a duplicate data center, the companies are each afforded off-site protection. However, in event of a regional disaster, such as a storm, each of the sites might be subject to identical threats.  Therefore, this option should be reserved for businesses with shoestring budgets, in areas that face low regional threat risk.

Cloud-Based Disaster Recovery as a Service (DRaaS)
The emergence of cloud-based DRaaS over the past few years has been a game-changer for businesses of all sizes and budgets. DRaaS solutions can enable complete recovery of data and entire production environments in minutes - not hours or days. On a predetermined basis, a company's physical and/or virtual servers send images of their environments to the cloud of a DRaaS provider. In the event of an adverse event at the company's site, such as a storm or fire, a virtualized (and fully-operational) version of the physical server can be rapidly spun-up in the DRaaS cloud. Additionally, the affordability of DRaaS is attractive as it doesn't require capital investment and even some appliance-based solutions are offered as Hardware as a Service.

Despite its abundant benefits, though, DRaaS still doesn't solve the age-old problem of "what" a business needs to protect unless it's set up manually by default. Moreover, while advances in WAN Optimization equate to more rapid transfer of data to the cloud, there are still some bandwidth issues.

Hybrid Cloud Solutions
Hybrid cloud solutions are bursting onto the market and freeing applications from the need to be tied to a physical piece of hardware. They enable applications to live both locally, as well as in a cloud environment, at the same time. These hybrid solutions mean businesses don't have to DIY for their own disaster recovery sites and can instead designate a cloud provider to provide the infrastructure

In turn, these cloud vendors can achieve efficacies of scale and performance rarely seen with individual operators. For a small number of application-centric situations, such as finance institutions, this won't be the best solution. But for almost any other business, it leaves no reason not to move disaster recovery to the cloud.

Multi-Cloud Solutions
The disaster recovery landscape continues to evolve at a breakneck pace and very soon businesses will have the ability to operate between many clouds and avoid being locked down by just one. For instance, companies can now choose solutions that enable virtual and physical loads to be recovered inside multiple cloud providers and even orchestrate cascading failovers between different providers. This freedom essentially enables businesses to place their recovery eggs in multiple baskets. In the distant future, we can logically surmise that businesses will one day be able to move between cloud providers on a whim by simply pushing a button and failing over on top of another cloud platform.

Choosing the Right Solution
Businesses can narrow their search a bit further by choosing universal products that address their basic need around recovery (failover/failback) while being as agnostic to hardware and software as possible. At the same time, they should expand their horizons and look for application-centric solutions that enable them to focus on what matters: the actual data that drives their business. Any company that maintains a business continuity plan and implements the right cloud technology to meet their needs is well on the path to saving itself from becoming another morbid statistic the next time disaster strikes.

More Stories By Fredrik Schmidt

A 25-year veteran in the IT industry, Fredrik Schmidt is responsible for driving the development of innovative cloud products and solutions at Accelerite.

Prior to joining Accelerite, he served as Technical Director at Symantec, Senior IT/IS Director at Technicolor by Thomson, and CIO and Co-Founder of Kryptonite Security.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@CloudExpo Stories
There will be 150 billion connected devices by 2020. New digital businesses have already disrupted value chains across every industry. APIs are at the center of the digital business. You need to understand what assets you have that can be exposed digitally, what their digital value chain is, and how to create an effective business model around that value chain to compete in this economy. No enterprise can be complacent and not engage in the digital economy. Learn how to be the disruptor and not ...
2015 predictions circa 1970: houses anticipate our needs and adapt, city infrastructure is citizen and situation aware, office buildings identify and preprocess you. Today smart buildings have no such collective conscience, no shared set of fundamental services to identify, predict and synchronize around us. LiveSpace and M2Mi are changing that. LiveSpace Smart Environment devices deliver over the M2Mi IoT Platform real time presence, awareness and intent analytics as a service to local connecte...
The 5th International DevOps Summit, co-located with 17th International Cloud Expo – being held November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA – announces that its Call for Papers is open. Born out of proven success in agile development, cloud computing, and process automation, DevOps is a macro trend you cannot afford to miss. From showcase success stories from early adopters and web-scale businesses, DevOps is expanding to organizations of all sizes, including the...
Thanks to widespread Internet adoption and more than 10 billion connected devices around the world, companies became more excited than ever about the Internet of Things in 2014. Add in the hype around Google Glass and the Nest Thermostat, and nearly every business, including those from traditionally low-tech industries, wanted in. But despite the buzz, some very real business questions emerged – mainly, not if a device can be connected, or even when, but why? Why does connecting to the cloud cre...
An effective way of thinking in Big Data is composed of a methodical framework for dealing with the predicted shortage of 50-60% of the qualified Big Data resources in the U.S. This holistic model comprises the scientific and engineering steps that are involved in accelerating Big Data solutions: problem, diagnosis, facts, analysis, hypothesis, solution, prototype and implementation. In his session at Big Data Expo®, Tony Shan focused on the concept, importance, and considerations for each of t...
The web app is Agile. The REST API is Agile. The testing and planning are Agile. But alas, Data infrastructures certainly are not. Once an application matures, changing the shape or indexing scheme of data often forces at best a top down planning exercise and at worst includes schema changes which force downtime. The time has come for a new approach that fundamentally advances the agility of distributed data infrastructures. Come learn about a new solution to the problems faced by software orga...
Imagine a world where targeting, attribution, and analytics are just as intrinsic to the physical world as they currently are to display advertising. Advances in technologies and changes in consumer behavior have opened the door to a whole new category of personalized marketing experience based on direct interactions with products. The products themselves now have a voice. What will they say? Who will control it? And what does it take for brands to win in this new world? In his session at @Thi...
Docker is becoming very popular--we are seeing every major private and public cloud vendor racing to adopt it. It promises portability and interoperability, and is quickly becoming the currency of the Cloud. In his session at DevOps Summit, Bart Copeland, CEO of ActiveState, discussed why Docker is so important to the future of the cloud, but will also take a step back and show that Docker is actually only one piece of the puzzle. Copeland will outline the bigger picture of where Docker fits a...
SYS-CON Media named Andi Mann editor of DevOps Journal. DevOps Journal is focused on this critical enterprise IT topic in the world of cloud computing. DevOps Journal brings valuable information to DevOps professionals who are transforming the way enterprise IT is done. Andi Mann, Vice President, Strategic Solutions, at CA Technologies, is an accomplished digital business executive with extensive global expertise as a strategist, technologist, innovator, marketer, communicator, and thought lea...
With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo in Silicon Valley. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place Nov 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with 17th Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading in...
Container technology is sending shock waves through the world of cloud computing. Heralded as the 'next big thing,' containers provide software owners a consistent way to package their software and dependencies while infrastructure operators benefit from a standard way to deploy and run them. Containers present new challenges for tracking usage due to their dynamic nature. They can also be deployed to bare metal, virtual machines and various cloud platforms. How do software owners track the usag...
If cloud computing benefits are so clear, why have so few enterprises migrated their mission-critical apps? The answer is often inertia and FUD. No one ever got fired for not moving to the cloud - not yet. In his session at 15th Cloud Expo, Michael Hoch, SVP, Cloud Advisory Service at Virtustream, discussed the six key steps to justify and execute your MCA cloud migration.
SYS-CON Events announced today that BMC will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. BMC delivers software solutions that help IT transform digital enterprises for the ultimate competitive business advantage. BMC has worked with thousands of leading companies to create and deliver powerful IT management services. From mainframe to cloud to mobile, BMC pairs high-speed digital innovation with robust...
Containers Expo Blog covers the world of containers, as this lightweight alternative to virtual machines enables developers to work with identical dev environments and stacks. Containers Expo Blog offers top articles, news stories, and blog posts from the world's well-known experts and guarantees better exposure for its authors than any other publication. Bookmark Containers Expo Blog ▸ Here Follow new article posts on Twitter at @ContainersExpo
Compute virtualization has been transformational, yet security policy implementation and enforcement has lagged behind in agility and automation. There are a number of key considerations when implementing policy in private and hybrid clouds. In his session at 15th Cloud Expo, Malcolm Rieke, the Director of Product Management at Catbird, discussed the impact of this new paradigm and what organizations can do today to safely move to software-defined network and compute architectures, including: ...
Cloud and Big Data present unique dilemmas: embracing the benefits of these new technologies while maintaining the security of your organization's assets. When an outside party owns, controls and manages your infrastructure and computational resources, how can you be assured that sensitive data remains private and secure? How do you best protect data in mixed use cloud and big data infrastructure sets? Can you still satisfy the full range of reporting, compliance and regulatory requirements? In...
In this scenarios approach Joe Thykattil, Technology Architect & Sales at TimeWarner / Navisite, presented examples that will allow business-savvy professionals to make informed decisions based on a sound business model. This model covered the technology options in detail as well as a financial analysis. The TCO (Total Cost of Ownership) and ROI (Return on Investment) demonstrated how to start, develop and formulate a business case that will allow both small and large scale projects to achieve...
The move to the cloud brings a number of new security challenges, but the application remains your last line of defense. In his session at 15th Cloud Expo, Arthur Hicken, Evangelist at Parasoft, discussed how developers are extremely well-poised to perform tasks critical for securing the application – provided that certain key obstacles are overcome. Arthur Hicken has been involved in automating various practices at Parasoft for almost 20 years. He has worked on projects including database dev...
Building low-cost wearable devices can enhance the quality of our lives. In his session at Internet of @ThingsExpo, Sai Yamanoor, Embedded Software Engineer at Altschool, provided an example of putting together a small keychain within a $50 budget that educates the user about the air quality in their surroundings. He also provided examples such as building a wearable device that provides transit or recreational information. He then reviewed the resources available to build wearable devices at ...
There has been a lot of discussion recently in the DevOps space over whether there is a unique form of DevOps for large enterprises or is it just vendors looking to sell services and tools. In his session at DevOps Summit, Chris Riley, a technologist, discussed whether Enterprise DevOps is a unique species or not. What makes DevOps adoption in the enterprise unique or what doesn’t? Unique or not, what does this mean for adopting DevOps in enterprise size organizations? He also explored differe...