rethinking disaster prepardness theits12
DESCRIPTION
Rethinking Disaster Prepardness to Leverage Resources in a Cloud and Mobile World: Presentation given at the 2012 Tennessee Higher Education Symposium (THEITS) - In many respects the disaster recovery plans of today are based upon the environments of old where commodity hardware, cloud resources and mobile devices didn’t exist. In November of 2011 the Tennessee Board of Regents office became the first public higher education organization to move its ERP system to the cloud by having it hosted at the state’s new data center. The following January, state auditors came on site to perform a routine biennial audit. The audit process included an information systems and disaster recovery component which led to a complete rethinking of disaster recovery in the new environment. This presentation chronicled the issues of moving mission critical systems to the cloud and how cloud resources from various sources coupled with mobile devices can be incorporated for cost effective disaster recovery planning.TRANSCRIPT
Thomas Danford
Jon Calisi
Tennessee Board of Regents
Tennessee Higher Education IT Symposium – April 15, 2012
Rethinking Disaster Prepardness to Leverage Resourcesin a Cloud andMobile World
Agenda
Our Goal: Start a discussion on how we might collectively rethink new DP/DR paradigms
Auditors and CFOsThe landscape and how it has changedDisaster prepardness challengesOur new ERP strategyHosting (cloud) tangible benefitsDisaster preparedness strategies &
considerationsDiscussion and Q&A
2
How the Landscape has Changed!
1986 Proprietary Hardware
– Expensive & Big
– Long Lead & Handling
PCs in 16.6% of Homes– Modems/RS-232
– Text Interface
– Low Computer Literacy
Brick/Bag Cell Phones– Costly & Poor Coverage
On Premise Data Centers– Employer Supplied Electronics
– Collaboration in Proximity
2011 Commodity Hardware
– Inexpensive & Small
– FedEx Overnight
PCs in >82% of Homes– Broadband (70%)
– GUI
– High Computer Literacy
Small “Smart” Phones– Affordable & Ubiquitous
“Cloud” Computing (_aaS)– Commercialization of IT (BYOD)
– Collaboration in the Cloud
4
5
1%
2%
3%
4%
6%
7%
10%
12%
16%
16%
21%
31%
42%
Chemical Spill
Tornado
Earthquake
Terrorism
Winter Storm
Fire
Hurricane
Flood
Human Error
IT Software Failure
Network Failure
IT Hardware Failure
Power Failure
Disaster Preparedness Challenges
InternalData Center Failures
ExternalData Center Failures
Source: NetApp© Inc.
Our New ERP Strategy
Hosted in the cloud at OIR (since October 2011)
– Economies of scale
– Tangible benefits
DR planning still required
– OIR premium DR packages (Platinum, Gold, Silver, etc.)
– A role reversal of data centers approach
6
7
Hosting (Cloud) Tangible Benefits Physical Plant • Intruder Security (Guards, Locks, Cameras, etc.) (State Audit concern) • HVAC & Environmental Controls (Closed system, Redundant, Excess capacity) • Power (N+1 Redundant, 2 circuits, Independent path, PDU, UPS/Battery) • Diesel Generator (Redundant, 5 days operation w/o refueling) • F-4 Tornado Rated Facility, Not on a floodplain • Fire Detection & Suppression (State Audit concern) • Bandwidth & Connectivity (Multiple providers, Independent path)Infrastructure • Offsite Data Replication (Disaster recovery/Business Continuity) • Network Management (Firewalls, Load balancing) • Server Failover • Enterprise SAN with commodity disk space (fiber vs. SATA) • Enterprise Backups (Disk 2 Disk 2 Tape, 30 day onsite disk recovery, De-duplication) • 4 Year Hardware Refresh • System and Security Monitoring Appliances & Software (HP OpenView, Security)Service Levels (Represents Increases in Staff Capability Presently Unavailable) • Deep bench of Technicians (Networking, Server Admin, DBA) • Network/Servers/Databases monitored 24 X 7 • Patches and upgrades are managed (State Audit concern) • Strict Change Control Policy is enforced (State Audit concern) • Help Desk is available 24 X 7 • Disaster Recovery Plan and Testing (State Audit concern) • Full-time Security Officer & Staff of 30
Putting Disaster Recovery into Perspective
RTO – Recovery Time Objective
RPO – Recovery Point Objective
The closer to real time protection the higher the cost
Picking the insurance plan that fits your organization
Day 1
Day 2
Day 3
Day 4
$0
$50,000
$100,000
$150,000
$200,000
$250,000
8
The Realities and the Objectives
Hosting (Cloud) Resources Greatly Reduce RiskIn a Cloud World (most) all Disasters are LocalHigher Ed is not an IT Transactional Business
So the Objectives Should be:Evaluating “True Risk”Balancing Costs in Light of RiskCompliance with Audit Expectations
9
Disaster Preparedness Strategy
10
Backing up the Cloud
Nightly backups to central office data center
Use UC4 to automatically move the backups
Prepped VMs ready for Banner deployment
The same process for Banner development
11
Central Office Offsite Backup Strategy
Automatic SAN 2 SAN nightly backups
Backups will include:– Mission critical files
– Vm’s
12
Central Office Disaster Preparedness
TelecommutingPhasing out desktopsBring your own device (BYOD)Maximize mobile devicesVirtualization
Strategies
13
Central Office Disaster Preparedness
Current Operations Local Exchange server Office face 2 face meetings Website Communications My documents Departmental files
During a Disaster Live.edu Google Hangout Facebook Live.edu SkyDrive Live.edu SkyDrive
Resources
14
Employees – Communications & Mobile
Chat and text messaging capabilitiesE-mail – Outlook Web App
[email protected] = [email protected]
Mobile Devices– iPad/iPhone
– Android
– Windows Mobile
Mobile Apps – SkyDrive
– OneNote
15
Employees – Working with Files and Data
Storage – 25GB/employee– SkyDrive (drag and drop from desktop)
– Ability to sync
– Ability to share files/directories
Applications – cloud based with desktop integration – Bing search Engine
– PowerPoint
– OneNote
– Word
– Excel
16
Personal Resources (Mobile Apps)
News and weatherBusiness continuityCloud storageUtilitiesOthers?
17
Discussion and Q&A
What’s happening on your campus?Ideas & suggestions?Interest in collaborating?
18
Thomas Danford Tennessee Board of Regents
http://www.linkedin.com/in/tdanfordhttp://twitter.com/tdanford
Thank You!
Jon Calisi Tennessee Board of Regents