Disaster Recovery & Business Continuity May 2007 Survey Results
Common Solutions Group Meeting
Bill Clebsch, Stanford University
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
Who Participated
● 25 CSG Member Schools Participated
4/22/2009
Brown University Carnegie Mellon University Columbia University Cornell University Duke University Georgetown University Harvard University Indiana University MIT New York University Penn State University Princeton Stanford University
-
University of California, Berkeley University of Chicago University of Colorado, Boulder University of Delaware University of Michigan University of Minnesota University of Southern California University of Virginia University of Washington University of Wisconsin, Madison Virginia Tech Yale University
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 1
Do you have a documented Business Continuity Plan (N=26)
Do you have a documented Business Continuity Plan?
11 13
yes no in process
2
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 2
Which areas participated in developing your Business Continuity plan? (N=25)
If yes or in process which areas participated or will participate in developing the plan? (check all that apply)
20 18 18 16 14 12 12 10 8 8 6 4 2 0 Central IT Central administration Health and Safety Entire campus Other (please specify) 5 12
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 3
Which Business Continuity Planning Tool do you use (N=26)
What Business Continuity Planning Tool do you use?
2
11
2
10
6 5
None
Excel/Word
LDRPS (Strohl Systems)
Paragon (Sungard)
Other (please specify)
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 4
What are your Disaster Recovery strategies for your IT services (N=26)
What are your strategies for disaster recovery of IT services?
4
4
Hot site Warm site Cold site None 9 9
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 5
Distance of your alternate disaster recovery site from your main campus data center (N=26)
How far is your alternate disaster recovery site from your main campus data center?
4
4 13
1 to 20 miles 21 to 50 miles Out of region None
5
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 6
Scope of disaster recovery plans (N=26)
Which option best describes the scope of your disaster recovery plans?
4 Level 1: minor event
12
Level 2: a major event localized to your primary data center (includes Level 1 response) Level 3: a major event with widespread campus/community impact (includes Level 1 & 2 response)
10
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 7
Scope of business continuity / disaster recovery plan (check all) (N=25)
What is the scope of your institution's business continuity/disaster recovery plan (check all that apply)
Other
Personal desktop/laptop
Distributed research computing
Distributed departmental computing
Central research computing
Central enterprise computing
0
5
10
15
20
25
30
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 8
Overall recovery time objective (N=26)
What is your overall recovery time objective?
30 25 20 15 10 5 0 Level 1 Level 2 Level 3
N/A < 90 days < 60 days < 1 month < 1 week < 3 days
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 9
Arrangements with partner institutions (N=26)
Do you have any arrangement with a partner institution for disaster recovery services?
9 Yes No 17
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 10
Do you have a vendor contract for disaster recovery services (N=26)
Do you have a contract with a vendor to provide disaster recovery services?
No = 13
Yes = 13
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 11
Testing strategy
What is your strategy for testing your business continuity/disaster recovery plans?
5
Annual tabletop exercise Greater than annual tabletop exercise
10 End-to-end system test without cutover of production data End-to-end test including cutover of production data Other (please specify)
4
2
4
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 12
Largest hurdle (n=24)
What is the largest hurdle associated with your business continuity/disaster recovery program?
0 7 7 Executive level support Commitment to maintain up-to-date documentation Cost of the program Other (please specify)
10
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 13
Have you used your plans during the last 36 months? (N=26)
Has your institution experienced a Level 1 2 or 3 disaster that caused you to use your business continuity/disaster recovery plans during the past 36 months?
8 Yes No 18
4/22/2009
2007 Business Continuity & Disaster Recovery Survey Results
STANFORD UNIVERSITY • INFORMATION TECHNOLOGY SERVICES
page 14