Disaster Processing Continuity Plans are essential strategies designed to ensure that an organization can continue operating or quickly resume operations after a disaster. The effectiveness of these plans depends on the specific backup and recovery options chosen, each of which has its own advantages and disadvantages. Here’s an overview of the key concepts related to disaster processing continuity planning:

Mutual Aid Agreements (Reciprocal Agreements)

• Definition: A mutual aid agreement is an arrangement between two similar organizations to take over each other’s processes in case of a disaster.
• Advantages:
  • Cost-effective: Generally inexpensive since no third-party service is involved.
  • Shared Resources: Resources and facilities are shared between the organizations.
• Disadvantages:
  • Exact Match Required: The organizations must have similar systems and processes.
  • Limited Capacity: There might not be enough capacity to handle the additional load.
  • Short-term Solution: Typically only feasible for short-term disasters.
  • Geographic Risk: A disaster could affect both organizations if they are in the same area.
  • Non-Enforceable: The agreement is typically not legally enforceable.

Subscription Services

• Definition: Third-party services that provide alternate backup and processing facilities in the event of a disaster. These are the most common implementations of disaster recovery strategies.
  1. Redundant (Mirrored Site):
     • Definition: A fully mirrored site that is kept continuously updated with the primary site, ensuring near-zero downtime.
     • Advantage: Provides almost immediate failover with minimal disruption.
     • Disadvantage: Extremely expensive due to the requirement for continuous synchronization and maintenance.
  2. Hot Site:
     • Definition: A fully configured and ready-to-use backup site. It includes all necessary hardware, software, and up-to-date data to continue operations almost immediately.
     • Advantages:
       • Immediate Availability: Can be operational within hours.
       • Exclusive Use: Ensures that the organization has dedicated resources.
       • Long-term Viability: Suitable for both short-term and long-term disruptions.
     • Disadvantages:
       • High Cost: Expensive to maintain due to the need for constant updates and readiness.
       • Administrative Overhead: Requires significant resources to manage and maintain.
       • Security Requirements: Needs to have the same security controls as the primary site.
  3. Warm Site:
     • Definition: A site with some pre-installed hardware and network connections, but it may not have the latest applications or data, which need to be installed or restored.
     • Advantages:
       • Cost-effective: Less expensive than a hot site.
       • Faster Setup: Can be operational within 12 hours.
       • More Location Options: More flexible in terms of location.
     • Disadvantages:
       • Setup Time: Takes some time to configure and become fully operational.
       • Nonexclusive: The site might be shared with other organizations, leading to potential delays.
  4. Cold Site:
     • Definition: A facility with basic infrastructure (power and HVAC) but no pre-installed hardware or software. It’s the least prepared option.
     • Advantages:
       • Low Cost: Inexpensive to maintain.
       • Flexible Location: Easy to choose a location.
     • Disadvantages:
       • Lengthy Setup: Takes a long time (up to a week) to become fully operational.
       • Potential False Sense of Security: May give a misleading impression of readiness.
  5. Service Bureau:
     • Definition: A third-party service that provides complete backup processing facilities.
     • Advantages:
       • Quick Response: Can be quickly made available.
       • Testing Capability: Allows for regular testing of recovery procedures.
     • Disadvantages:
       • High Cost: Can be expensive, especially if needed for long-term use.
       • Short-term Solution: Generally considered a short-term backup option.

Multiple Centers (Dual Sites)

• Definition: Processing and resources are spread across multiple computer centers, which can be managed either by the same organization or through a reciprocal agreement with another organization.
• Advantages:
  • Shared Resources: Multiple sites share resources, reducing costs.
  • Redundancy: Provides redundancy and increases resilience.
• Disadvantages:
  • Complex Administration: Requires managing multiple configurations and ensuring consistency across sites.
  • Risk of Simultaneous Disasters: A major disaster could potentially affect all sites, particularly if they are geographically close.

Other Data Center Backup Alternatives

1. Rolling/Mobile Sites:
   • Definition: Mobile units, such as trailers equipped with necessary IT infrastructure, that can be deployed as needed.
   • Advantages:
     • Flexibility: Can be moved to where they are needed.
     • Cost-effective: Less expensive than permanent hot or warm sites.
   • Disadvantages:
     • Setup Time: Can take time to set up and become operational.
     • Cold Site Equivalent: Often considered equivalent to a cold site in terms of readiness.
2. In-house or External Hardware Supply:
   • Definition: Maintaining a stock of hardware either on-site or with a vendor to replace failed systems.
   • Advantages:
     • Quick Replacement: Can quickly replace failed hardware.
     • Cost-effective for Warm Sites: Suitable for warm sites where some infrastructure is already in place.
   • Disadvantages:
     • Inadequate for Hot Sites: Not sufficient for environments requiring immediate failover.
3. Prefabricated Buildings:
   • Definition: Ready-to-deploy buildings that can be set up as a data center in the event of a disaster.
   • Advantages:
     • Low Cost: Cheaper than building a permanent site.
     • Flexibility: Can be deployed as needed.
   • Disadvantages:
     • Cold Site Equivalent: Requires time to set up and equip, similar to a cold site.

Recovery Time Objectives (RTO)

• Definition: RTO refers to the target time set for the recovery of IT and business activities after a disaster. It reflects the maximum acceptable amount of time that a business process can be disrupted before serious harm occurs.
• Examples:
  • RTO of 5 minutes to hours: Requires a Hot Site.
  • RTO of 1-2 days: Suitable for a Warm Site.
  • RTO of 3-5 days: Could use a Mobile Site.
  • RTO of 1-2 weeks: Cold Site might be sufficient.

Summary

• Mutual Aid Agreements: Low-cost but limited and non-enforceable backup arrangements between similar organizations.
• Subscription Services: Third-party services providing various levels of backup and recovery capabilities, from Hot Sites (quick recovery, high cost) to Cold Sites (low cost, slow recovery).
• Multiple Centers: Distributed processing across multiple sites, offering redundancy but requiring complex management.
• Other Alternatives: Include mobile sites, prefabricated buildings, and hardware supplies, each offering varying levels of preparedness.
• RTO: The time required to recover business operations, guiding the choice of backup strategy (Hot, Warm, Cold, etc.).

These disaster processing continuity strategies help ensure that an organization can quickly recover and maintain operations following a disaster, minimizing downtime and mitigating risks.