Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Recovery Management
1. Recovery Management
Surely this is no longer a
challenge?
Tony Lock
Freeform Dynamics Ltd
+44 7711 719113
tony@freeformdynamics.com
www.freeformdynamics.com
Copyright 2009 Freeform Dynamics Ltd -1-
2. What is going on?
Current IT Initiatives
The Advent of Virtualisation
The Challenges for Backup and Recovery
Management
Managing Information
Conclusions
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 -2-
3. The view at the end of 2008...
Is IT funding in your Has the ‘credit crunch’ had an
organisation generally on the impact on IT investment in
way up or down? your company?
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 -3-
4. If you are expecting an impact in 2009, how great do you
think it will be? (November 2008)
0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%
Corporate (>5000 emps)
Mid-Market (250-5000 emps)
SMB (<250 emps)
Devastating
Significant cut backs across the board
Cut backs in selected areas (e.g. non critical)
No more than a bit of general belt tightening
N/A - Don't expect an effect
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 -4-
5. Do you have or are you planning to begin initiatives over
the next 6 months in any of the following areas?
0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%
Virtualisation - servers
General infrastructure optimisation
Mobile and remote access
Workforce communication and collaboration
Custom application development
Enhancement of external web presence
Content management, workflow and BPM
Governance, compliance and risk management
Policy-based security and identity management
Implementation of new packaged applications
Storage and/or information lifecycle management
Desktop upgrade/modernisation
Virtualisation - storage
Optimisation of power usage and management
IT best practice delivery (ITIL, COBIT, etc)
Green computing
Deployment of business intelligence software
Packaged application consolidation/replatforming
Service oriented software development approaches
Outsourcing and/or managed services
Automation of supply chain and/or other B2B activity
Thin client adoption
Software as a service (SaaS)
Virtualisation – desktop
Social computing and/or Web 2.0
Current initiative Planned in next 6 months No current or imminent activity Don't know
Mid-Market
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 -5-
6. What is going on?
Current IT Initiatives
The Advent of Virtualisation
The Challenges for Backup and Recovery
Management
Managing Information
Conclusions
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 -6-
8. However, knowledge levels are low
What is your
current level of
knowledge
and
experience of
virtualisation?
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 -8-
10. The impact of virtualisation
On hardware On management and
acquisition strategy support processes
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 10 -
11. Licensing is a major challenge
Are you happy with existing licensing models as applied
to virtual systems?
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 11 -
12. A bright future for virtualisation?
Adoption can only accelerate through downturn
BUT
Management Flexibility Architectural
and process needs new convergence
challenges budgetary required to
await models unlock power
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 12 -
13. What is going on?
Current IT Initiatives
The Advent of Virtualisation
The Challenges for Backup and Recovery
Management
Managing Information
Conclusions
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 13 -
14. Isn’t Backup and Recovery sorted already?
►Organisations still face challenges with backup
Volume of data to be protected
Backup windows
Security of backup data
►Recovery capabilities are rarely “tested”
Except when there is a real world demand to recover data
►There is a lack of specialist data recovery / protection
skills in most mid-market companies
IT generalists who need to do everything not just backup and
recovery
►An opportunity for channel suppliers to step in
Professional services
Managed Services
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 14 -
15. What is the status of your capability in the following areas?
(EMEA)
0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%
Backup and restore capability
Workflow and document management
General storage archiving and retrieval
Email archiving and retrieval
Federated search and discovery across
repositories
Centrally coordinated records management
Classification of information assets by business
value
Information destruction according to policy
IT security management capability
Disaster recovery and business continuity
Fully implemented or working on now Future initiative No need or interest Not answered
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 15 -
16. What is the status of your capability in the
following areas?
(%age stating the area is a future initiative)
FS PS Telco HC O&G Gen
Backup and restore capability 24% 21% 5% 20% 28% 19%
Centrally coordinated records management 30% 36% 25% 42% 38% 35%
Classification of information assets by business value 48% 36% 38% 48% 41% 35%
Disaster recovery and business continuity 15% 33% 26% 24% 19% 45%
Email archiving and retrieval 32% 28% 27% 36% 54% 47%
Federated search and discovery across repositories 36% 35% 38% 40% 49% 28%
General storage archiving and retrieval 15% 23% 14% 27% 31% 39%
Information destruction according to policy 26% 24% 26% 30% 43% 33%
IT security management capability 13% 29% 16% 35% 36% 43%
Workflow and document management 23% 24% 20% 27% 24% 24%
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 16 -
17. Has regulatory compliance or governance been a specific
driver in enhancing any of the following?
0% 10% 20% 30% 40% 50% 60%
Backup and restore capability
Workflow and document management
General storage archiving and retrieval
Email archiving and retrieval
Federated search and discovery across repositories
Centrally coordinated records management
Classification of information assets by business value
Information destruction according to policy
IT security management capability
Disaster recovery and business continuity
View risk very broadly across the business View risk in specific areas only
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 17 -
18. To what degree are the following used in your data centres
and how is this changing?
0% 20% 40% 60% 80% 100% -20%
-40% 0% 20% 40% 60% 80%
Frequent disk to
disk backup
High speed tape
backup
Simple mirroring of
storage devices
Continuous data
protection solutions
Smart distributed
data replication
High Medium Low Decreasing Increasing
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 18 -
19. What is going on?
Current IT Initiatives
The Advent of Virtualisation
The Challenges for Backup and Recovery
Management
Managing Information
Conclusions
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 19 -
20. Has regulatory compliance or governance been a specific
driver in enhancing any of the following?
0% 10% 20% 30% 40% 50% 60%
Centrally coordinated records management
Workflow and document management
Information destruction according to policy
General storage archiving and retrieval
Backup and restore capability
Email archiving and retrieval
Federated search and discovery across repositories
IT security management capability
Classification of information assets by business value
Disaster recovery and business continuity
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 20 -
21. At the highest level, what is your approach to information
retention?
0% 10% 20% 30% 40% 50%
We operate a rules
Analyst notes:
based information
retention policy
Over 70% of organisations
have rules – but 40% only
have one rule – keep
everything – this is better
Our policy is to keep than nothing but is
everything problematic in itself without
advanced info management
capabilities which we know
most do not possess.
We don't have an
information policy
Then we have the (almost)
25% with no policies
whatsoever.
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 21 -
22. How much of the information generated or received
electronically within your organisation is it necessary to
store persistently for business or regulatory reasons?
0% 10% 20% 30%
More than 75%
50-75% The challenge is not just
about what to keep or throw
25-50% away, (although we know this
is an issue too), for many
10-25% organisations the challenge is
to find a balance between
Less than 10% cost and management
capabilities.
We are currently trying to work this out
Not sure
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 22 -
23. How much of the information generated or received
electronically within your organisation is it necessary to store
persistently for business or regulatory reasons?
0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%
Financial Services
Public sector
Telecoms
Healthcare
Oil & Gas
General industry/commercial
More than 75% 50-75% 25-50% 10-25% Less than 10% We are currently trying to work this out Not sure
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 23 -
24. How frequently does the IT department have to deal with
information governance related incidents? (Industry Sector)
0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%
Financial Services
Public sector
Telecoms
Healthcare
Oil & Gas
General industry/commercial
Most days Most weeks Most months Less frequently Unsure
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 24 -
25. Could you put a value or percentage on how much of your
IT budget would be spent on information governance
related investments in the next 12 months? (Summary)
0% 10% 20% 30%
21+%
11-20%
5-10%
1-5%
0%
Unsure
Not answered
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 25 -
26. What is going on?
Current IT Initiatives
The Advent of Virtualisation
The Challenges for Backup and Recovery
Management
Managing Information
Conclusions
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 26 -
27. Desirable features of Recovery Management?
►Safe
Certainty of success
Encryption if wanted / needed
►Fast
To Backup and To Recover
►Simple to use
Certainty of success
D2D, D2T, D2D2T all supported
De-duplication
Off site / SaaS / Managed Services
►Work with major applications
►Cost Effective
Minimum consumption of Tapes, Power and human
Resources
►Easy to license
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 27 -
28. Summary
► Virtualisation is happening
Server and Storage
► Backup is still a major challenge for many organisations
Volume of data
Speed
Security
Costs
► Recovery is an even bigger issue
► Testing of data protection and recovery processes does not
happen enough
Except in live scenarios
► The Channel has strategic and tactical roles to help
organisations implement effective data recovery capabilities.
Copyright 2007 Freeform Dynamics Ltd Ltd.
Copyright 2008 Freeform Dynamics
2009 - 28 -
Notas do Editor
Virtualisation will be the darling of 2009. But it is still in its infancy as a technology – it will have matured when we stop talking about it!
Bold and red are proposed areas that CA would find of interest to focus on for sales / marketing activities.
Virtualisation = RealityFrom ‘data storage’ to ‘information management’There is a need to discover completely the data that is heldAdd meta data to “classify” data in terms of its information value and how it should be accessedTiered Service is happening – ILM to manage data in relation to its “business value” not just its agePerformance, Security, Accessibility, ComplianceAcross heterogeneous drive arrays and tape systemsArchive and Backup are both requiredAccess to information at all times, from all locations, from the entire history of the organisationAgain costs are becoming more visiblePower, People, Media, AccessArchive functionality will grow in importance, rapidly