New Year’s Resolution: Craft a Business Continuity Plan
Another year of data collection, natural disasters and cyber attacks has come to a close. Although we can only guess at what mother nature has in store for us in 2018, one thing is guaranteed, security threats won’t abate and could get much worse in the new year. And lets not forget the leading causes of data loss in small businesses: human error and hardware failure. All these equate to one simple conclusion, it’s time to move data protection to the top of the to do list and 2018 is the year to ensure business continuity for your organization.
Downtime is a killer
With the importance and reliance on technology in day-to-day business, it is critical that every organization has a complete solution to deal with the threat of data loss and continuity of operations. If access to mission critical applications and data isn’t available within hours following a disaster or human error small to medium businesses can suffer severe repercussions. It’s 2018 – traditional and antiquated backup methods such as tape and disk are insufficient at protecting businesses from the crippling and costly effects of downtime.
A natural disaster, power surge, viruses, hardware failure, or even accidental deletion can wipe out years of data. Businesses cannot afford to lose time attempting to rebuild their lost, vital information. It is critical that the data is recoverable and spun up in a short period of time.
The 4 Business Continuity Planning Essentials eBook is your first bit of homework. This ebook, outlines four distinct but interconnected business continuity planning essentials:
- Crafting an employee safety and communication plan
- Craft a customer communications plan
- Enable IT Uptime
- Ensure Continuity of operations and avoid downtime
So what is the difference between Business Continuity and Data Backup?
Although overlapping, these terms represent uniquely different mindsets when it comes to data protection. Data backup answers the questions: is my data safe? Can I get it back in case of a failure? Business continuity, on the other hand, involves thinking about the business at a higher level, and asks: how quickly can I get my business operating again in case of system failure?
Successful backup is the foundation for disaster recovery and business continuity. But in case of failure, you have to get that data back and restore it quickly enough so your business doesn’t suffer. For example, if your server dies, you wouldn’t be able to quickly get back to work if you only had file-level backup. For you to start working again, your server would need to be replaced, all software re-installed, data re-installed and then the whole system would need to be configured with your settings and preferences. This process could take hours or even days—and in the meantime, your users can’t get their jobs done.
It is crucial for businesses to know exactly what to look for in a backup solution. This guide outlines the key criteria for SMBs to keep in mind when seeking out total data protection. And this video examines the key differentiators for various types of backup.
Let’s calculate your RTO & RPO
Many organizations do not have a comprehensive way to determine the actual costs of downtime for their business. Utilizing RTO & RPO are valuable in calculating downtime loss and gives SMBs a better understanding of the risks relating to business failure. Thinking about business in these terms puts your backup solution into perspective.
- RTO (Recovery Time Objective): The duration of time within which a business must be restored after a disaster or disruption to avoid unacceptable consequences associated with a break in business continuity.
- RPO (Recovery Point Objective): The maximum tolerable period of time in which data might be lost due to a disaster.
By calculating your desired RTO, you have determined the maximum time that you can be without your data before your business gets into serious trouble. Alternatively, by specifying the RPO, you know how often you need to perform backups, because you know how much data you can afford to lose without damaging your business. You may have an RTO of a day, and an RPO of an hour. Or your RTO might be measured in hours and your RPO in minutes. It’s all up to you and what your business requires.
Once you determine your RPO and RTO, it’s time to calculate how much downtime and lost data will actually cost you.
Answer the following questions:
- How many employees would be affected if critical data were unavailable?
- What is the average wage of the affected employee (per hour)?
- What is the per-hour overhead cost of the affected employees?
- How much revenue would be lost per hour as a result of the unavailability of data?
Add up the average per-hour wage, the per-hour overhead, and the per-hour revenue numbers and you have how much a data loss will cost you. Given that funding and budget constraints can be the top challenge (43 percent) for a business to implement a business continuity solution, calculating your RTO will give you the financial validation needed to justify its purchase and maintenance. The Datto Recovery Time Calculator is the tool you need to evaluate your Recovery Time and Recovery Point Objectives.
The final piece – Testing
Testing is a vital piece to making sure your backup is functioning properly, establishing true Business Continuity. It is the only way to reveal gaps in your plan and address them proactively. It is also a great benefit to your employees. If your team is well versed in the process and procedures things will run more smoothly.
- Helps validate plan content and ensure that the identified strategies are capable of providing response and recovery results within the timeframes (or capabilities) approved by management.
- Highlights weaknesses and areas for improvement, or where capabilities fail to align to business continuity and IT disaster recovery requirements.
- Provides critical hands-on training to the personnel responsible for the response and recovery activities (which ensures an appropriate level of performance and develops confidence).
Testing your plan should also be conducted with an IT solutions company specializing in complete data solutions to maintain the integrity of your system and ensure compliance. The test is scheduled for a time that will avoid an interruption in your business productivity and will have no impact on your network. A virtual test provides the only reliable environment for predicting the impact of change and is an excellent way to test patches or perform upgrades.
Every business has to prepare for the worst. Those that don’t may never fully recover from a disaster. This is one New Year’s resolution you’ll be happy to keep. So grab your disaster recovery checklist and let’s welcome the new year with a rigorous business continuity plan! Ancero certified data protection solution specialists are ready to provide your free, no-obligation business continuity assessment. Ancero is a full service IT company and is proud to be a Datto Blue Partner data service provider. Data Protection could be your best investment in 2018!
Want to learn more about data security? Here are additional resources for you: