I Get My Files Back When? – Another BC/DR Conflict

What would you do if the files you rely on every day were unavailable?

Most of us become accustomed to storing much of the data we use – spreadsheets, forms, slide packs, photos and other documents – on ‘shared files’.  Whether it’s on a corporate “S: drive” or a SharePoint site, information stored on shared facilities is a productive and relatively inexpensive means of saving, retrieving & archiving documents we create, maintain and use.  Shared facilities are an alternative to saving files on our device’s “C: drive” (a Business Continuity no-no!), or on a USB device – both of which create access and security problems.

It is often a common assumption that -following a data center disruption – our SharePoint application or ‘S: drive’ will be restored concurrent with, or slightly following other mission-critical IT systems and applications.  That might be true; then again, it might be days or weeks before the shared files are restored.

Don’t assume anything unless you ask.  As a BCM professional you owe your constituents (the business functions, departments, lines of business and others whom you help develop and maintain their Business Continuity Plans) the best available advice.  Make sure you understand how and when shared data files will be restored – and how access to them will be obtained (it may be different).  Make certain your constituents understand too.

With the rapid adoption of cloud technology for data backup and disaster recovery, those uninformed assumptions can multiply.  When people hear “we backup our data to the cloud” they may assume 24/7 availability.  They may be wrong.  Cloud backup is no more accessible than tape backup – it’s just backup data stored in a different format (online vs. tape) at a different location (3rd party hardware vs. an off-site storage facility).  When people are told their organization has a ‘cloud-based DR program’ they may hear that “the cloud” will give them access to all their business-as-usual archives.  That assumption could be far from the truth.

If your DR Plan includes restoring data from tape (or disk, or from the cloud) to a warm or cold site (either your own or that of a 3rd party), you should get an estimate of the expected RTO for shared file restoration.  Don’t be surprised if that RTO is days – or even weeks – longer than the RTO for your organization’s most critical applications and data.

Even with a cloud-based DR plan (or DRaaS), ask the question:  what’s the RTO for shared drive or SharePoint file restoration?  Then make certain that individual BC Plans mesh with those real timeframes- not someone’s assumptions.

If file RTO’s are too long (individual folder or file exceptions are rare), an alternate strategy for replicating ‘mission-critical’ files may be necessary.  Choose the best method available – but heed the IT Security policies & procedures.  Don’t let lost Business Continuity files to become a subject for Crisis Management!

SHARE:
Jim Mitchell

Jim Mitchell

A frequent speaker at Business Continuity conferences, many of Jim Mitchell’s blogs can be found elsewhere on eBRP’s website and has published articles in DRJ, Continuity Insights and Continuity Central. Jim has more than 20 years of experience in Business Continuity; if you don’t agree with his opinions – he won’t be surprised.

Related Posts

Enterprise Resiliency: Navigating Through Disruptions

Enterprise Resiliency: Navigating T...

In today’s threat landscape, the ability of an organization to…
Orchestrating BC/DR Testing: Virtual – Emergency Operations Centers

Orchestrating BC/DR Testing: Virtua...

  Enhancing Planning and Logistics Management  Coordinating BC/DR tests involves…
Insights into creating a successful Disaster Recovery Test – Part 2: Preparation

Insights into creating a successful...

Insights into creating a successful Disaster Recovery exercise – Part 1: Objectives

Insights into creating a successful...

Aligning Cyber Incident Response Planning with Your BC/DR Program

Aligning Cyber Incident Response Pl...

Cyber disruptions – and their impact on both reputations and…
What Can You Do when your BCM software Relationship Falls Apart

What Can You Do when your BCM softw...

“This isn’t working.”  “I’ve changed.”  “I don’t see a future…
Aligning BC/DR to CSIRP Challenges

Aligning BC/DR to CSIRP Challenges

The immediate reaction to a cyber-security incident is the FUD…
Technology Modeling – the eBRP Way

Technology Modeling - the eBRP Way

Definition: Technology modeling is a point-in-time snapshot of an Enterprise’s…
eBIA – The eBRP Way

eBIA - The eBRP Way

Definition: A Business Impact Analysis (BIA) is the cornerstone of…
Threats, Impacts, BCPs

Threats, Impacts, BCPs

Within Business Continuity circles there is ongoing debate about the…