The Future of Business Continuity & Resiliency Richard Cocchiara: IBM Distinguished Engineer; CTO IBM Business Continuity & Resiliency Services (BCRS); Managing Partner IBM Resiliency Consulting Services
IT outages from any unplanned event now have significant, if notcatastrophic, impact to companies. The impact of lost data or unplanned downtime can be catastrophic, resulting in lost revenue, reputation and competitive position. Finances Loss of reputation Revenue Drop in stock price Lost deals Disruption of cash flow Lost discounts Missed payments Company reputation Damaged relationships with customers, suppliers, partners, or investors. Direct revenue losses or loss of future revenues Losses due to investments not made Miscellaneous costs Productivity Regulatory Temporary staff Travel expenses Equipment rental Employees who cannot perform their jobs Missed deadlines Inability to meet compliance requirements 2
Business trends today are driving the need for improved IT risk management. Rapidly Changing Business Requirements: move from IT recovery to around-the-clock IT availability increasing cost of downtime reduced Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) need to adapt and respond to IT demands before they become a problem movement towards managing IT risks holistically Global Operations: the world is becoming flatter and flatter slow growth in mature markets like North America and Western Europe while explosive growth in markets such as Latin/South America, Middle East, Asia Pacific, and Eastern Europe businesses and governments are establishing symbiotic relationships Regulatory Scrutiny: need to protect and retain increasing amounts of information for longer periods of time disperse storage or processing of data exposes enterprises to potential legal and regulatory risk requirement to store information in-country to meet privacy and financial compliance rules 3 Evolving User Experience: increased use of the web for providing customer service and support use of social media for improved communications use of mobile devices for constant connection to a company
Technology improvements are changing both our client needs and how we deliver our services to meet those needs. Recovery Time and Data Loss: advances in data storage and replication technologies advances in telecommunications enabling high-speed bandwidth at lower cost Improved Resilience: server virtualization and cloud computing provides the ability to move applications to temporary environments virtual desktop infrastructure (VDI) enables distributed work forces and access to critical applications during a disaster enterprises will adopt technologies such as active/active datacenters Cost Efficiency: x.86 virtualization and virtualized server management tools reduces costs and system recovery time mobile devices in the workforce provide a cheaper option than providing traditional computer equipment for home use or for temporary use during the disruption. Network Centricity: advances in telecommunications are enabling enterprises to increase data replication capabilities messages can be distributed using voice, SMS or email and received using mobile devices social networks enable an efficient way to communicate during a disaster 4
In summary, much is changing over the next few years with regards to how IT risks will be addressed by companies. Shorter recovery times will lead to increased need for high availability. Globalization will enable companies to extend their potential markets but also bring with it new challenges from regulatory compliance and technology. Cloud will enable organizations to have access to capabilities they never had before particularly from geographic diversity. New technologies such as virtualization will help improve resource utilization and recoverability but companies need to balance this with increased risk from consolidation. New technologies that allow for high availability such as active/active and replication over distance will enable new capabilities. Analytics will begin to provide business and government with headlights that will enable them to anticipate and respond to events before they impact operations. Mobile devices are now part of the IT infrastructure and must betreated with the same level of business resilience rigor as other IT devices. Social media can dramatically improve an organizations critical communications if managed properly. 5
IBM BCRS has seen these trends result in an evolution that has taken us from disaster recovery to business resilience and eventually intelligent IT risk management. IT:reactive Business: none Recovery time:days or weeks Disaster recovery IT:proactive Business: reactive Recovery time: minutes or hours IT:proactive Business: proactive Recovery time: seconds or always up Business continuity Dedicated hardware Business resiliency Cloud computing Intelligent IT Risk Dedicated recovery model IBM BCRS in the future Predictive Analytics IBM BCRS founded in 1989 Syndicated hardware Shared recovery model 6
We have the industry s most comprehensive portfolio of services designed to support IT risk needs today and into the future. Prepare Recover Prevent World Class Execution IBM Resiliency Consulting Identify, quantify, and prioritize business and IT risks, then develop strategies and designs to address those risks IBM SmartCloud Managed Backup IBM SmartCloud Content Management IBM Infrastructure Recovery Eliminate the impact of disruptive events to IT and the workforce IBM Managed Resiliency Balance workloads and reduce application, data and system loss with nearzero recovery times Cloud-based data backup and vaulting, delivering a 99% backup success rate and faster recovery Cloud-based archive and e-discovery to manage compliance while minimizing spiraling storage costs 164 BCRS data centers in 54 countries aggressive expansion in 2013 Five million square feet of recovery floor space 2,500+ dedicated Sales, Consulting, & Delivery Professionals Ranked as one of the top business continuity consulting companies IBM SmartCloud Virtualized Server Recovery Cloud-based failover for virtual and physical machines for near instantaneous recovery (P2V & V2V) IBM SmartCloud Application Resilience Cloud-based service that provides clients with a mission critical hosting environment 7 IBM SmartCloud Resilience Transformation Consulting services designed to help clients move to Cloud-based services in support of their business resilience needs
Market trends will continue to push the need to reduce system downtime and increase the need to holistically manage IT risks. Resiliency trends are moving towards combined business and IT strategies that leverage automation and look to utilize secondary resources and facilities The Future Business Resiliency Redundant design Standby assets Warm/Hot environment Intelligent Risk Management Dual processing Workload balancing Hot swap environment Operations Level: Redirect & Resume Business Level: Monitor & Predict Infrastructure Recovery Tape based Shared assets Manual recovery Business Continuity Electronic data transfer Dedicated assets Warm site environment Platform Level: Rebuild & Restore Information Level: Reconfigure & Synchronize Yesterday & Today 2004 2013 200X 8
To get started, identify the risk areas with the biggest impacton your organization s business strategy and goals Determine what are the most critical business processes, applications, technology, facilities and people Conduct a risk and threat analysis Rank risks based on past occurrences, amount of potential revenue loss, damage to the brand, compliance risks and single points of failure Prioritize safeguards including provisions for business continuity, hardware & software support, disaster recovery, security, compliance, etc. Conduct a cost-benefit analysis for a quantitative risk assessment Determine next steps based on threat severity, selected safeguards and the cost and ease of implementation. 9
IBM BCRS can help you develop the right solution to your IT riskneeds today, tomorrow and into the future. Extensive disaster recovery, business continuity, and business resilience experience with a proven track record of 100% customer recovery Forward thinking innovation with deep skills in analytics, recovery, technology, security and business processes Ability to consistently respond to events around the world with local service and support in 54 countries Corporate-side focus on uptime for the end user Integrated hardware, software, services and research capabilities Proactive monitoring capabilities across the full spectrum of risks include security, disasters, system performance, etc. 24 hours-a-day, 7 days-a-week staffing by over 2,500 IBM resiliency, continuity and recovery experts Single point of accountability The future starts today. Are you ready? 10
Thank you Richard Cocchiara IBM Distinguished Engineer rmcocch@us.ibm.com 1-845-496-1478 ibm.com/services/continuity 11
Copyright information Copyright IBM Corporation 2013 IBM Global Services Route 100 Somers, NY 10589 U.S.A. Produced in the United States of America February, 2013 All Rights Reserved IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corporation in the United States, other countries, or both. If these and other IBM trademarked terms are marked on their first occurrence in this information with a trademark symbol ( or ), these symbols indicate U.S. registered or common law trademarks owned by IBM at the time this information was published. Such trademarks may also beregistered or common law trademarks in other countries. A current list of IBM trademarks is available on the Web at Copyright and trademark information. Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both. Other company, product and service names may be trademarks or service marks of others. Use of the information herein is at the recipient's own risk. Information herein may be changed or updated without notice. IBM may also make improvements and/or changes in the products and/or the programs described herein at any time without notice. References in this publication to IBM products or services do not imply that IBM intends to make them available in all countriesin which IBM operates. 12