Get documents about "Company Network Design Project Report
Description
Company Network Design Project Report document sample
Document Sample
Data Protection Survey
Report
October 2004
1
Report Outline
Slide number
• Project design:
– Objectives and methods 4
– Respondent profile 5
• Data backup and storage practices for laptop computers 7
• Events driving changes to testing and evaluation procedures 11
• Data backup and storage practices for networks 14
• Disaster recovery practices 17
• Key findings 23
2
Project Design:
Research Objectives
Survey Methods
Respondent Profile
3
Research Objectives and Survey Methods
Research Objectives:
• Gain an understanding of how mid-size companies perceive data backup and protection.
• Explore trends and best data backup, storage and disaster recovery practices.
• Explore what challenges IT managers face in data backup and storage.
Survey Methods:
• An online survey of network tape administrators at small and mid-size companies was conducted in
the continental United States. The respondents were screened to meet the following qualifications:
– Directly responsible for network or data center tape storage and administration.
– Manage a team responsible for network or data center tape storage and administration.
– Holds a senior management position (CIO, VP, director, or manager).
• All companies represented in the survey have a network or data center tape backup and storage
system and keep critical business information on their computer system.
• Survey respondents were selected from the Technology Advisory Board®, a worldwide Internet panel
of over 25,000 scientists, engineers, information systems professionals and information technology
executives. This database allows targeting of respondents with the job responsibilities required by this
specific project.
• Fleishman-Hillard Knowledge Solutions surveyed 204 tape storage managers and IT directors.
Interviews were completed online from September 27 through October 12, 2004. Interviews were 13
minutes in length.
4
Respondent Profile
The interviewed group was evenly distributed between small and mid-size companies. The majority of respondents are
managers heading IT teams of one to three people.
Company Size Position in the Company Size of the IT Team
500-1,000 100-499
employees CIO Between
employees More than 8 1-3 people
10% Vice President people
3% 17%
Manager
49% 51%
30% Director 59%
57% 24%
Between
4-7 people
N=204
5
Respondent Profile
Respondents are primarily engaged in activities typical for mid- and senior level managers heading IT teams.
Scope of Responsibilities
Make decisions on implementation of data backup 94%
technologies
Responsible for making decisions regarding data
backup and storage needs 93%
Involved in contract and price negotiations with vendors
providing data backup and storage technology or services 78%
Lead development and implementation of a disaster
recovery plan for your company’s data center 78%
Head a team responsible for network or data storage 67%
at your company
Personally purchase data backup media 51%
N=204
6
Data Backup and Storage Practices for Laptop
Computers
Presence of Formal Procedures for Data Backup
of Laptop Computers
Two companies in five (40 percent) rely on an extensive network of laptop computers used by employees who work remotely.
Less than half (49 percent) have formal procedures in place for backing up “mission-critical” data hosted on laptop computers.
“Does your company rely on an extensive “Do you have formal procedures in place for
network of laptop computers used by backing up „mission-critical‟ data hosted on
employees who work remotely?” laptop computers?”
Don’t know 1%
No Yes
60% 40% No Yes
50% 49%
N=204 N=82
Yes Yes Yes
98% 86% 78%
8
Practices for Data Backup Hosted on Laptops
While companies have numerous practices for data backup hosted on laptop computers, they most often leave it up to the
end-user to make critical decisions when it comes to data backup.
• In the majority of companies in this group (57 percent), each end-user is individually responsible for downloading laptop
data onto the company server.
• Two companies in five (42 percent) let the end-user determine individually what data files are backed up.
• Only one company in five (21 percent) uses software for continuous backup of open application files in the laptop
connected to the company network
• Only 21 percent provides end users with flash/thumb drives as data backup devices for their laptop computers.
End-users responsible for downloading laptop data onto the
57%
company server
End-users determine data files for backup 42%
Rely on manual backup processes 33%
Laptop users have access to backup servers 32%
Use software to detect changes and send updates to the
29%
company network
Provide end-users with CD/DVD as data backup media 27%
Use software for continuous backup of open application files 21%
Provide end-users with flash/thumb drives 21%
Use a file-level backup 16%
Encourage use of “My briefcase” feature 12%
None of the above 6%
9
N=82
Practices for Data Backup Hosted on Laptops
Larger companies are more likely to use software and high-level backup for their laptops, while smaller companies tend to
delegate decision-making on data backup to end users and rely on manual backup processes.
End-users responsible for downloading laptop data onto the 66%
company server 50%
End-users determine data files for backup
50%
34%
40%
Rely on manual backup processes
27%
Laptop users have access to backup servers
32%
32%
Use software to detect changes and send updates to the 24%
company network 34%
Provide end-users with CD/DVD as data backup media
26% 100-499 employees
27%
500-1,000 employees
Use software for continuous backup of open application files
8%
32%
Provide end-users with flash/thumb drives
24%
18%
Use a file-level backup
8%
23%
Encourage use of “My briefcase” feature
3%
21%
None of the above
3%
9%
10
N=82
Events Driving Changes to Testing and Evaluation
Procedures
11
Events Driving Reviews and Evaluation of Data
Backup Procedures
E-mail viruses have had the most profound effect on data backup procedures. More than half of companies (59 percent)
reviewed and/or changed their data backup procedures in response to this threat.
Companies with 100-499 Employees
“Which of the following events led 52%
your company to review or change its
data backup procedures?”
Total 23% 25% 21%
16% 15% 14% N=103
59%
31% 28%
E-mail Threat of Natural 9/11 attackGovernment Threat by Homeland
viruses cyber disaster regulations employee security
22% 19% 17% 15% attack issues
E-mail Threat of Natural 9/11 attackGovernment Threat by Homeland
viruses cyber disaster regulations employee security Companies with 500-1,000 Employees
attack issues 66%
N=204
40%
31% N=101
22% 22% 19% 17%
E-mail Threat of Natural 9/11 attack Government Threat by Homeland
viruses cyber disaster regulations employee security
12
attack issues
Confidence in Ability to Restore Lost Data
Companies express the highest level of confidence (over 50 percent “extremely confident”) when it comes either to restoring
most recently created files or to restoring data after a major power outage. They have the lowest level of confidence in
restoring “mission-critical” files under three scenarios:
•Files are more than a year old
•Backup server is completely destroyed
•There is a local or regional disaster if data center is unavailable.
100% Extremely Confident Very confident Somewhat confident Not confident
75%
33% 33%
50% 34% 46% 44%
32% 36% 33% 35%
25% 53% 50% 30%
33% 28% 26% 25% 23% 20% 19% 14%
0%
9% 14% 22% 20% 27% 24% 26% 24% 28% 25%
-25% 5% 3% 10% 15%
5% 15% 22% 17% 29%
6%
-50%
Accidentally A major A corrupted A major e- Files created Your backup Recreate an A year-old A local A regional
deleted two- power outage three-month mail virus two years ago server is entire file customer disaster if disaster if
day old file old file are deleted completely system database data center data center
destroyed unavailable unavailable
N=204
13
Data Backup and Storage Practices for Networks
14
Presence of Formal Data Backup
and Storage Strategy
The presence of a formal data backup and storage strategy has become a norm. An overwhelming majority of respondents
(90 percent) indicate that their organization has a formal backup and storage strategy.
“Does your organization have a formal data backup and storage strategy?”
No Yes
10% 90%
N=204
Yes Yes Yes
91% 86% 87%
15
Testing of Data Backup and Storage Procedures
and Operations
Companies pay more attention to the human component of data backup and storage. The majority (56 percent) test data
backup and storage procedures and operations at least quarterly. Larger companies are more likely than smaller companies
to test procedures and operations on a monthly basis.
Companies with 100-499 Employees
“How often does your organization
test data backup and storage
procedures and operations?”
Total
29% N=103
23%
17% 14%
31% 9%
25%
1%
13% 15%
10%
After a Monthly Quarterly Twice a Once a Less than
2%
problem year year once a
year
After a Monthly Quarterly Twice a Once a Less than
problem year year once a
year
Companies with 500-1,000 Employees
N=204 39%
21% N=101
16%
10% 11%
3%
After a Monthly Quarterly Twice a Once a Less than
problem year year once a
16
year
Disaster Recovery Practices
Presence of a Formal Disaster Recovery Plan
Seventy-one percent of companies do have a formal disaster recovery plan in place.
“Do you have a formal disaster recovery
plan at your company?”
Don’t know 3%
No Yes
27% 71%
Yes
71%
Total
(N=204)
Yes
Yes 72% Yes Yes
98% 86% 78%
18
Testing of Disaster Recovery Plan
Testing disaster recovery plans after updates is still not a universal practice, leaving companies exposed to risk of
unrecoverable loss of data. Almost half (40 percent) don’t test their DR plan each time they update it.
“Do you test your disaster recovery plan each time you update it?”
Do not update our DR plan 7%
Yes
No 54%
40%
N=144
Yes Yes
47% 68%
Yes
86%
19
Testing Disaster Recovery On-Site and Off-Site
Facilities
Regular testing of DR on-site and off-site facilities, processes, and people has not become a universal practice (see the
following slides). Thirty-one percent test their on site and off site facilities only “after a problem occurs” or “never” at all.
“How often does your organization Companies with 100-499 Employees
test disaster recovery on-site and off-
site facilities?”
Total
22% 21%
15% 16%
9% 9%
4% N=103
After a Monthly Quarterly Twice a Once a Less Never
17% 20% 18% problem year year than tested
13% 12% once a
7% 9% year
Companies with 500-1,000 Employees
After a Monthly Quarterly Tw ice a Once a Less than Never
problem year year once a tested
year
26%
18%
N=204 14%
11% 11% 10% 9% N=101
After a Monthly Quarterly Tw ice a Once a Less than Never
problem year year once a tested
year 20
Testing Disaster Recovery Processes and
People
Twenty-eight percent test their processes and people only “after a problem occurs” or “never” at all.
“How often does your organization Companies with 100-499 Employees
test disaster recovery processes and
people?”
Total
21% 17%
17% 16%
14% 11%
2% N=103
19% After a Monthly Quarterly Twice a Once a Less Never
7% 17% 14% problem year year than tested
15% 14% 13%
once a
year
After a Monthly Quarterly Twice a Once a Less Never
Companies with 500-1,000 Employees
problem year year than once tested
a year
21%
16%
N=204 13% 12% 17% 9%
12% N=101
After a Monthly Quarterly Twice a Once a Less Never
problem year year than once tested
a year 21
Amount of Time Required to Restore “Mission-
Critical” Applications: By Company Size
How quickly can companies be up and running after a disaster? Almost half (48 percent combined) will have to spend at least
24 hours or more to restore their mission-critical applications. It appears that factors other than the volume of data determines
the time required to restore mission critical applications. More than half of smaller companies (53 percent) would require more
than 24 hours for data restore.
“How quickly can your company restore the „mission-critical‟ applications and data necessary
to run the business after a major loss caused by a disaster?”
Total 100-499 employees 500-1,000 employees
2 hours 5% 9% 2% 2 hours
4 hours 19% 12% 27% 4 hours
8 hours 13% 15% 8 hours
12%
12 hours 10% 8% 12% 12 hours
24 hours 28% 30% 27% 24 hours
More than a day 20% 23% 16% More than a day
Don’t know 4% 4% 5% Don’t know
N=103 N=101 22
N=204
Key Findings
Key Findings
• “One in two companies have not implemented formal backup procedures for laptop networks”
Survey finds that two in five companies rely on an extensive network of laptops, but less than half of the
respondents have formal procedures in place for backing up “mission-critical” data hosted on laptops.
• “E-mail viruses are the number one driver for reviewing or changing data backup and storage
procedures.”
More than half of companies reviewed and/or changed data backup procedures in response to e-mail viruses,
compared with 17 percent of those that did so out of concern of a disgruntled employee destroying data.
• “When it comes to testing the effectiveness of their disaster recovery plans, companies are being more
proactive, but could be doing more.”
Forty percent of companies don’t test their disaster recovery plan each time they update it and 28 percent test
disaster recovery processes and people only “after a problem” occurs or “never” at all.
24
