Business Continuity: An IT Perspective

Business Continuity: An IT Perspective

By Garry Herron

Unpleasant surprises can be dangerous and expensive, especially when they reach the point where they are called “emergencies” or “disasters.” We cannot eliminate these events. However, we can take steps that help to guard against them, and we can make preparations that will help return daily activities and business to normal. Experience is a great teacher, and the January 17, 1994 Northridge earthquake in the Los Angeles area was an outstanding experience.

The Information Technology (I/T) operations of many different companies were disrupted by the earthquake. Those companies that had prepared for some kind of disaster were the ones with the fastest and most effective recoveries. In all cases, successful recovery plans had similar elements, including:

A documented response plan in the hands of clearly-identified emergency response teams.
Readily-accessible employee contact information.
Current customer and client contact lists in the possession of accountable employees.
Current contact information for vendors, suppliers and service providers.

A documented disaster recovery plan that:

Described step-by-step procedures for recovering I/T operations that were critical.
Had been periodically exercised prior to the earthquake.
Had been kept current with changes in the business.

Availability of alternate locations for conducting business, such as:

A computer hot site.
Alternate, safe office space.

For those organizations that used an alternate computing facility or service, such as a vendor-provided hot site, several critical design points emerged. These included:

The availability of system hardware configurations that were current with those in use at the home locations.
Skilled vendor staff that could fulfill the necessary I/T operations tasks during the absence of the organization’s own staff
Current backup media that could be delivered to the alternate site in a timely and complete fashion.
Availability of a well-designed backup telecommunications network that could be activated on short notice to connect the
organization’s surviving business locations with the alternate computing facility.
Prior arrangements with software vendors that would enable the software to run on alternate computing hardware.
Documented computer operations scripts that could be made available at the alternate computing site.
Those operations scripts had to be clear enough to be successfully-used by any skilled staff to restore the critical I/T systems for use by the operating business units.

In all cases, these elements were most successful for those whose plans had included prior opportunities for rehearsals, tests and exercises. Strong support from senior management made the difference: if it was there, then the funding and the impetus to accomplish realistic planning was there, too.

Those businesses that were affected by the earthquake and which survived generally learned several things about the importance of I/T to the on-going vitality of the organization:

1. IT provides services and information that are critical to the functioning of the business.

2. If these services and information are unavailable for an extended period of time, then it becomes increasingly difficult to contact customers.

3. If you cannot contact your customers, then they start to think that you are out of business.

4. If your customers think that you are out of business, then you probably are out of business.

5. IT operations can be disrupted not only by local events that might directly damage the equipment, but also by external events that prevent access to the I/T location by critical support staff.

6. IT functions can be protected in an economical way that can help the business to survive a disaster.

7. Without preparation, scrambling around after a disaster to repair the effects of I/T disruption is more expensive than making the investment in contingency preparations.

8. The tolerance for computing downtime is always decreasing.

There is an active IT industry that provides professional guidance for making disaster recovery and other contingency preparations. In addition to providing subscription services to hot sites and other alternate computing arrangements, these firms can conduct a business impact analysis, develop recovery and continuous operations strategies, deliver on-site crisis management experts and provide guidance and project management in implementing all phases of contingency preparations.

Garry Herron is a Fellow of the Business Forum Institute, and is President and founder of Advanced Technology Solutions (ATS), a California small business specializing in disaster recovery and business continuity design, planning and preparations. He and his firm have provided requirements reviews, planning guidance and operational solutions to help numerous companies and governments in the development and implementation of disaster recovery and business continuity preparations. Prior to forming ATS, Garry was a career IBM professional with expertise in sales, management and consulting. A highlight of that career was leading the IBM Western Region Business Recovery Services team in its support of clients’ recovery actions after the January 1994 Northridge earthquake in Los Angeles. Garry holds an MBA degree from the Anderson School of Management at UCLA, and a Bachelor’s degree in Mathematics and Computer Science.

Search the ENTIRE Business Forum site. Search includes the BusinessForum Library, The Business Forum Journal and the Calendar Pages.

Search the ENTIRE Business Forum site. Search includes the Business
Forum Library, The Business Forum Journal and the Calendar Pages.