Blog

May 15th, 2013

BCP_May15_CWhen it comes to running a successful business, the last thing an owner or manager wants to think about is a disaster that could cause their business to go bankrupt. While there are many things you can do to minimize the potential fallout from any disaster, the most important is implementing a comprehensive disaster recovery plan that covers more than just data backup. If you are struggling to figure out what to do, this article may help.

Here are five tips to help ensure that your business is fully ready for the next disaster.

1. Backup everything While it can be tempting to only backup the most important data and programs, it can be a chore to identify what is deemed to be important. Who knows, a file that is non-essential today may become essential in the future. If it is lost due to a disaster, this could prove to be a problem.

It would be a good idea to look for a backup solution that covers all data and programs. But, having a full backup solution isn't enough, you also need to ensure that recovery is easy and can be implemented quickly.

2. Look into tiered recovery Establishing a tiered recovery method means identifying the value and importance of existing systems and utilizing a recovery method that meets needs. It would be a good idea to identify mission critical systems and adopt a recovery method that can have these systems up and running as quickly as possible. From there you can tier different systems and match a recovery method. For example, archived files are likely not needed right away, so they can be recovered at a later date, using a slower recovery method.

3. Keep copies of all keys and licenses With the amount of software and programs businesses use on a daily basis growing, it would be a good idea to keep copies of the activation keys (the string of digits and letters you enter to activate the full version of software) and purchased licenses.

While many of these are now distributed electronically through email, there are still software developers that distribute keys by mail or with the physical install CDs. If you lose the codes in a fire, you will be out of luck and have to purchase the software again. This is an extra charge you likely don't want.

4. Pick the right recovery locations The best recovery plans offer numerous backup solutions which are hosted in different locations. A good provider knows this and will utilize data storage centers as far apart as possible. If you choose to backup your own data, it would not be a good idea to keep the backups in the office.

Similarly, if you are preparing for a big disaster, you likely have physical locations that you can move to if your main business location is damaged or destroyed. Optimal plans will have more than one location identified, and have them as far apart as possible. This will minimize the chances of losing full operations and increase your business's ability to bounce back quicker.

5. Match your recovery plan to your business There are so many different backup and recovery options that it can be tough to pick one. The best course of action is to look at your systems and how they work. If you operate strictly offline, a cloud based backup solution likely isn't your best bet. Or, if you operate fully in the cloud, a physical tape or hard disk backup may not be optimal.

If you are looking to beef up, or establish a disaster recovery plan, try working with an IT partner like us, who can help you find the optimal solution that can meet your needs and budget.


Published with permission from TechAdvisory.org. Source.

March 23rd, 2013

Virtualization_May22_COne of the most integral business tools is the computer, as well as related technology, such as servers. This technology allows employees, managers and owners to do their jobs. The problem is often that the hardware running computers and servers is constantly evolving. Keeping your systems up-to-date is costly and many businesses simply cannot keep up. This is why an idea like virtualization can seem so appealing to so many.

Virtualization is the act of taking an existing system, say a server, and creating a virtual copy of it that is hosted either in a physical unit or somewhere out of the office. Some systems you can virtualize include: Desktops, Operating Systems, servers, hardware and storage. Most small businesses start with storage and server virtualization as this can usually be done with relative ease and at an affordable cost.

Benefits of virtualization The question many business owners ask when they are looking into virtualization is what benefits it can bring. While the positives are numerous, here are the five most common:

1. Reduced space Physical hardware can take up a lot of space, and the common trend among many businesses is that the space available per person is shrinking in order to save costs. Take for example your servers. If you virtualize these, you can probably fit all of them onto one or two units. This will reduce the space your hardware takes up, freeing up extra storage capacity or possibly another desk.

2. Reduced overhead Having hardware and servers in an office can be expensive to maintain. You have to have climate control to start with which means higher electricity bills and higher maintenance costs. Virtualization will often reduce overhead costs and save you money. Beyond that, many solutions offer a pay-per-use pricing model which makes predicting costs easier.

3. Quicker backup and recovery Many virtualization solution providers also offer backup services that can be automated. This means that your vital data is always backed up and protected. Beyond that, the backups can be stored at a different location, meaning that if there is a disaster, you can recover lost data quickly and easily.

4. Longer hardware replacement cycles Virtualized solutions and platforms often require lower computing resources because they are hosted on the provider's servers. This means that you won't have to replace existing tech hardware. Beyond that, existing systems can be used for longer which will save you money.

5. Virtualization is scalable If your company is growing, you will eventually have to add new systems. In an already cramped office this means finding the space for hardware or servers needed to support your growth, not to mention investing in systems that are compatible with existing hardware. Virtualization is highly scalable, and can grow with your company, often without the need for extra services.

In general, virtualization could help your business grow, while IT costs remain stable, or are even decreased. If you would like to learn more about how virtualization of your systems can help your company, contact us today.

Published with permission from TechAdvisory.org. Source.

February 21st, 2013

BCP_Feb20_COne of the major objectives of almost every business is to remain operational. From time-to-time there might be factors, such as a natural disaster, that could put your company at risk. To mitigate this threat, companies have started to adopt a Business Continuity Plan with the aim of being able to recover from such disastrous events.

While a Business Continuity Plan (BCP) can be complicated, and comprised of many different objectives, the main reason companies include this in their business strategy is to build up resilience. Disasters of many kinds can result in either lost data, sales or even business. While a BCP won't prevent large-scale disasters, it will help your business recover quicker.

When looking at how resilient your business is, there are three main aspects to consider.

RTO RTO stands for Recovery Time Objective and is the time period from the beginning of the disaster to recovery of operations. This number, or time period, will be different for every company. For example, companies that operate online stores will likely have a short RTO, as they rely on 24/7 uptime to conduct business and sales.

In general the RTO is an objective, one that employees and stakeholders should strive for. Having one can help planners identify potential problem areas along with critical functions that must be recovered and any preparations that will be necessary. If a business does not address, or identify a set time to recovery they could see an unnecessary increase in recovery times, or worse lost profits.

RPO RPO stands for Recovery Point Objective and represents the amount of data a business is willing, or can afford, to lose. The easiest way to figure this out is to look at your systems and think about how much data or information you personally can lose before being unable to do your job. From there, you can work out the frequency with which you should back up your systems.

For example: If you figure that you can lose a day's worth of data, then your backup should be done on a daily basis. If you currently back up your data or systems once a week, and figure you can only miss a day, then RPO helps you realize this is not enough and that you need a system or plan that better meets your needs.

The difference between RTO and RPO is that RTO is a broad process that covers the whole Business Continuity timeline, while RPO is focused on data and backup.

ROI When looking at different Business Continuity systems, it is always a good idea to calculate the ROI, or Return on Investment. You can calculate the cost of the integrating any plan, time to implement and recovery, expected value it can bring your business and avoided losses. This will give you a pretty good picture on whether current systems are strong enough, and if new alternatives are better.

By figuring out the time you expect to recover, how often you should back up and the total ROI of proposed, or existing, systems you can gain a clearer picture of how resilient your company is.

If you're looking to make your company a little more resilient, why not get in touch with us? We are happy to sit down and discuss your options with you.

Published with permission from TechAdvisory.org. Source.

January 24th, 2013

When Hurricane Sandy hit in 2012, many businesses in the US felt the effects due to service outages. This well publicized storm prompted many businesses, who were not hit or directly affected, to look into developing some form of plan to help them remain operational during any disaster situation. This practice is commonly referred to as Business Continuity, and for companies just looking at how to integrate this practice, there are a few things you should prepare before you launch.

Here's four questions you should answer when looking into adopting a Business Continuity plan.

1. What systems need to be recovered first? A good idea is to request each department/role list their essential systems and rank them in the order they need them back online in order to do their jobs. From here, you can compare answers and rank them in priority. For example, If all roles say they need Internet connection back online first, you know that the Internet is the first system that needs to be recovered.

2. What do we need to assure customers of stability? For the majority of businesses, the customer is the lifeblood. However, most customers will only stick around for a limited amount of time before going to a competitor if your business can't meet their needs. To keep customers loyal during a time of disaster, you need to prove you are either stable, or working to get there. Some examples of this could be a backup site with basic functionality that can take the place of your main website if it goes down.

3. What do business partners require? Your business partners are just as important as your customers and are often the link between the two. With partners, you often have set requirements that you need to meet in order to continue order fulfillment and shipment. You need to be aware of what these are and the related systems. After all, how are you going to get your product to your customers?

4. Are there any contractual requirements with vendors? Businesses that work with suppliers or vendors often have contractual obligations such as payment due on a certain date, or a set product order volume to fulfill the contract. As with business partners, you need to be clear on what these obligations are, and how you meet them. For example, if you pay a supplier on the 10th of every month, most will expect payment on the 10th, regardless of if you are operational or not.

Once you have the answers you needed you can take a step back and try to come up with a timeline of how long continuity actions should take and what your priorities are. From here, you can draft an actual plan, or look for vendors that can work with your systems and provide a continuity plan or service that meets your needs.

If you are looking for a business continuity system for your business please give us a call, we may have a solution that fits with your business.

Published with permission from TechAdvisory.org. Source.

November 28th, 2012

One of the biggest storms in recent memory hit the Eastern US in early November causing widespread destruction. There is always a lesson to learn from events like these, regardless of your location. For businesses, the storm made owners and managers pause and wonder if they are prepared for such a large scale event. They are forgetting to look at the smaller disasters that can be equally devastating. One such potential problem revolves around essential passwords, and who manages them.

Search for Terry Childs online and you'll find a number of articles about a former Network Administrator for the city of San Francisco who is currently in jail for supposedly doing his job. His job, as a network administrator, was to manage the city's network. When he was asked by his boss for the passwords to critical parts of the network, he refused on the grounds that the request went against the established network policy.

Issues like this: One employee or vendor in control of vital passwords, can pose a big problem to companies, especially during times of disaster. Imagine if you work with an administrator who is based in New York, and they lost power during Sandy. What could you do if your network crashed, or you needed access to your system and someone else has all the passwords?

The most crucial factor is you shouldn't trust one person or organization with passwords to vital systems. We don't mean personal passwords to systems, we mean passwords to vital systems, like servers or Internet connections. If one person has the passwords, there's just too much risk. If they are disgruntled, they have the power to do some serious damage, and if they are injured or are no longer alive, you'll face untold amounts in lost profit, and fees in recovering passwords and information.

There are a number of things you can do to mitigate problems like these.

  • Keep a password list - It could be a good idea to keep a physical list of the more important passwords. This is an important document, so it's a good idea to not leave this one lying around. If you have a safety deposit box or safe in the office you can put the list here.
  • Set passwords to the position, not the employee - Many companies will often give passwords to one person who will be in charge of these. When they advance, or if they switch roles, they will often take a password with them. Instead, look at organizing this a different way around: Assign a password to the position rather than an individual so that when they leave the person filling their role is given this password instead.
  • Assign a person to be in charge of passwords - This is a good idea, especially if you work with Managed Service Providers. A person of authority within your organization should be the main contact person, and they should have copies of all passwords given to outside companies.
  • Change passwords regularly - To avoid having employees steal things it's a good idea to change your passwords on a regular basis. If an employee leaves a position and is in charge of an important password, you should take steps to change this scenario even if you trust the person.
  • Create the right policy - If you are going to share passwords, or have a limited number of people who know them, it's a good idea to create a policy that clearly defines: what position has access to what; what happens when someone leaves; how to recover passwords; how many backups will be kept; how and when the password is to be shared. Basically you want to ensure you aren't caught flat footed. With employees, confidentiality agreements that explicitly state what they can and can't share and the consequences of breaching the policy should also be clearly defined and followed.
  • Pick who to trust - Important passwords shouldn't be shared with everyone, and you should take steps to vet the trustworthiness of the person or company you will be giving passwords to. If you have an established sharing process, and a vendor you're considering working with is pushing a policy that is different from yours, it may be a good idea to look for someone whose policies are closer to yours, or who can work around your policies.
If you are in the unfortunate position of not having the passwords to your system, it's a good idea to get in touch with IT professionals like us, as we are often able to recover systems and passwords, or at the very least, reset them. After you recover your systems, it's a good idea to test for vulnerabilities, especially if the last person in charge had a tendency to not share information. We can help with this and any other concerns with password management and recovery, so please contact us if you would like to learn more.
Published with permission from TechAdvisory.org. Source.

October 25th, 2012

Natural disasters happen and for some regions like Asia, they happen at a higher frequency. Because of this, a common perception has arisen that companies located in Asia have a higher state of alert and are better prepared. Events in the past year along with a recent report have highlighted that while companies do have Disaster Recovery (DR) plans in place, they may not be as organized as they need to be, which is something companies can learn from.

A report published by the EMC corporation in the summer highlights the current state of Disaster Recovery in Asia. The report takes an in-depth look at IT spending and the views of IT decision makers on Disaster Recovery in the Asia Pacific Region - South East Asia, Australia, China, Japan, South Korea and India.

The findings of the report are interesting considering current socioeconomic and natural conditions in the region. Asia, to date, has been largely unaffected by the negative economic conditions in both Europe and North America. According to the Q2 2012 Asia Job Index report released by Robert Walters, the number of IT positions advertised in major regions has grown across all sub-regions in Asia.

The most impressive countries were: Japan which saw IT postings achieve a quarter-on-quarter growth of 8%, compared to a country-wide quarter-on-quarter average decrease of postings across all industries of -4.6%. Malaysia is the other IT star, seeing IT positions grow 24.2% quarter-on-quarter, compared to a nation wide average growth of postings across all industries of 13.4%. On comparison, the whole Business Services Industry, including IT, in the US, achieved a growth of approximately 11%.

These figures for Asia show that companies in the region are investing in IT services and positions. The EMC’s findings parallel this, noting that many companies are investing more on DR possibly due to the relatively high number of disasters, natural or otherwise, affecting the region in the past year. On average, companies invested 11% of their IT budget on DR plans. Companies in North America spend between 2% and 4% of their annual IT budget on DR plans. This is a big difference, but is it paying off?

Looking deeper into the survey it can be noted that in the past year, 47% of respondents saw some form of data loss. The average amount of data lost was 484GB. Malaysia and India were hardest hit with an average loss of 1,099GB and 713GB lost, respectively. The top three reasons for loss were reported as being due to: data corruption (58%), hardware failure (50%) and loss of power (35%).

Despite the larger spending, the information reveals that many companies in Asia may not be spending their DR budgets wisely. Almost half of companies have experienced negative effects from some kind of emergency they likely could have prepared for.

In this region, and in all regions, the amount of data available to, and stored by companies is growing exponentially. If this trend of inadequate spending continues, companies will stand to see loss of data compounded.

We highly recommend that you take this information into account when developing your DR plans, and ensure that your budgets are properly allocated. For help with adopting the right DR strategy please contact us, we may have an effective plan that meets your needs.

Published with permission from TechAdvisory.org. Source.

September 27th, 2012

Imagine getting up on a Monday after a great long weekend spent with the family, driving to the office, only to find the building on fire. Most people would be dumbfounded, or feel a profound sense of loss. If you have a Disaster Recovery (DR) system, you wouldn’t have to worry, (well not as much anyway), as could rest assured that your documents and systems would be up and running soon, with little to no loss of important data.

Here are four ways to ensure your DR plan is sufficient and company is disaster-ready.

Are your systems compliant? Many DR systems are licensed, and it’s important to ensure that these licences are both up-to-date and supported by all necessary backup systems. If you’ve added or changed components like a server or software, but not upgraded the relevant licenses, chances are your systems won’t be covered when disaster strikes. If this is the case, when you go to retrieve the backup, you’ll just get a license error; your data can’t be retrieved.

Another issue with DR software is that it’s often not used, lying dormant for years. You should regularly check and ensure the software meets modern compliance standards, is up-to-date and licenses have not expired. You should also be aware of how the software you use integrates and interacts with the DR software. For example, an upgrade to a new email server, may not communicate well with your DR software.

What’s the status of your backup server? As most DR plans usually involve a separate server from day-to-day servers, it’s important to ensure that they are functioning properly, usually by having the vendor test them. It’s also equally important to communicate with the vendors or manufacturers of the servers to ensure that the correct software/hardware licenses are in place and cover the function. If they aren’t, you could risk legal action or being fined.

Test regularly Regular tests are an integral part of a properly functioning DR plan. You need to conduct tests on at least a yearly basis to ensure all systems involved in the DR plan function well. From these tests, observe any function that performed poorly, or not at all, and take steps to fix or replace it.

Work with a knowledgeable partner DR plans and systems can be a complicated, almost messy aspect of business. While this may be, DR is crucial to the survival of a business after a disaster, and shouldn’t be treated lightly. To get it right liaise with DR experts to create and maintain a plan that meets your needs.

If you would like help with either implementing or improving your DR plan, please contact us, we may have a solution for you.

Published with permission from TechAdvisory.org. Source.

August 31st, 2012

In many parts of the world, the Internet is quick enough to allow businesses to operate solely in the cloud with relatively few problems. There are however issues with many Internet connections, and at times the service can slow to a crawl, leaving many managers wondering what is going on and how to fix it.

Have you noticed that from time to time the Internet is a lot slower than it should be? If so, this could be because something is hogging all the bandwidth, which is the rate at which data is transferred in and out of one connection. Here are six of the most common bandwidth hogs.

  1. YouTube. If you allow employees to watch YouTube or connect to other streaming services, and they are using it frequently, you’ll notice a significant decrease in overall Internet speed. Some companies have noted that 40 staff using YouTube will account for over half of the total bandwidth usage.
  2. FTP sites. Some companies run FTP sites that host essential files that employees can download. When more employees are downloading/uploading files to the FTP site there’s less bandwidth available for other operations, so the Internet will be slower.
  3. P2P. P2P covers a large number of aspects including video conferencing and sharing of files via programs such as BitTorrent. All P2P services use an incredibly large amount of bandwidth when in operation, slowing the Internet to a point where speeds from 10 years ago were faster.
  4. Online backup. Backing up essential files will capitalize bandwidth leaving very little for other operations. It’s a good idea to conduct backups after office hours to minimize interruptions.
  5. Encryption. In certain industries regulatory bodies require a certain level of encryption, or for companies to take certain steps to secure data. Any extra encryption or security features will slow sites down, however this usually cannot be avoided.
  6. Spam/Virus/Malware. As many scams aim at stealing information the main way this is done is by sending the information over an Internet connection, that is your Internet connection. If you have viruses or other security threats you can guarantee that your Internet will be slower.
If you notice your Internet is slowing down at certain times, it’s a good idea to check and see if any of these six bandwidth hogs are in action. You can:
  • conduct a virus scan to look for malware;
  • ensure your computers aren’t backing up and if they are schedule the backup for later;
  • turn off or block any and all sharing services, and schedule video conferencing for times when bandwidth isn’t needed by other functions; and,
  • limit the bandwidth assigned to YouTube and other streaming services.
Before you tinker with any network connections though, it’s best to contact an expert . We may not just be able to help, but potentially provide an even better solution for you, speeding up your connection and your business success.
Published with permission from TechAdvisory.org. Source.

July 25th, 2012

BCP_May15_BTake a moment and think about your business and if you are prepared for a disaster. If you are like most business owners or managers you have some form of backup and maybe even a basic disaster recovery plan. While this is a start, recent big disasters around the world have proven that a simple backup is not enough. If you feel that your business is under prepared, there are steps you can take to fix that.

Here are five tips to help ensure that your business is fully ready for the next disaster.

1. Backup everything While it can be tempting to only backup the most important data and programs, it can be a chore to identify what is deemed to be important. Who knows, a file that is non-essential today may become essential in the future. If it is lost due to a disaster, this could prove to be a problem.

It would be a good idea to look for a backup solution that covers all data and programs. But, having a full backup solution isn't enough, you also need to ensure that recovery is easy and can be implemented quickly.

2. Look into tiered recovery Establishing a tiered recovery method means identifying the value and importance of existing systems and utilizing a recovery method that meets needs. It would be a good idea to identify mission critical systems and adopt a recovery method that can have these systems up and running as quickly as possible. From there you can tier different systems and match a recovery method. For example, archived files are likely not needed right away, so they can be recovered at a later date, using a slower recovery method.

3. Keep copies of all keys and licenses With the amount of software and programs businesses use on a daily basis growing, it would be a good idea to keep copies of the activation keys (the string of digits and letters you enter to activate the full version of software) and purchased licenses.

While many of these are now distributed electronically through email, there are still software developers that distribute keys by mail or with the physical install CDs. If you lose the codes in a fire, you will be out of luck and have to purchase the software again. This is an extra charge you likely don't want.

4. Pick the right recovery locations The best recovery plans offer numerous backup solutions which are hosted in different locations. A good provider knows this and will utilize data storage centers as far apart as possible. If you choose to backup your own data, it would not be a good idea to keep the backups in the office.

Similarly, if you are preparing for a big disaster, you likely have physical locations that you can move to if your main business location is damaged or destroyed. Optimal plans will have more than one location identified, and have them as far apart as possible. This will minimize the chances of losing full operations and increase your business's ability to bounce back quicker.

5. Match your recovery plan to your business There are so many different backup and recovery options that it can be tough to pick one. The best course of action is to look at your systems and how they work. If you operate strictly offline, a cloud based backup solution likely isn't your best bet. Or, if you operate fully in the cloud, a physical tape or hard disk backup may not be optimal.

If you are looking to beef up, or establish a disaster recovery plan, try working with an IT partner like us, who can help you find the optimal solution that can meet your needs and budget.


Published with permission from TechAdvisory.org. Source.

June 27th, 2012

Many companies in North America, the UK and Australia tend to adopt an almost invincible point of view, they believe that disaster can never strike their business and are stunned when it does. This is a dangerous viewpoint to take, especially for small businesses who stand to be affected the most from any disaster.

When a disaster strikes, 25% or more of small businesses affected will fail. Why do they fail? It’s not because of defects in the physical location, it’s mainly because they didn’t take the necessary steps to ensure that their business’s technology and related data is protected.

Because the modern business relies so heavily on technology, it’s essential that businesses have a business continuity plan (BCP) to minimize the loss of vital data, or in many cases, not lose any data at all. This is an important asset that will, one day, minimize losses felt due to any type of disaster. Small business owners know this, but many don’t know where to start. If you’re one of these owners, here are six tips on how you can prepare.

  1. Establish a backup regime. Data backup is one of the most important things you can do, be sure to regularly backup your corporate files, servers and user data files. A truly prepared company will have backups in a number of locations that can be easily accessed.
  2. Ensure solid communication platforms. One of the first things people do in a disaster is try to communicate with each other to ensure everything is ok. You can guarantee that some customers and employees will be calling to check in, so you need to have communication lines that work.
  3. Train employees. A BCP plan is useless if your employees don’t know their role in the implementation of the plan. It’s important that you train your employees on their roles, and that you communicate with them your expectations.
  4. Contingency plans. Like storing your data backups, you should set up contingency plans with the involved parties in your business. You should know where to go to do your banking, what your vendors’ or suppliers’ plans are and how they affect you, and most importantly: you should have a few locations where you can set up your business if the physical property is damaged.
  5. Review and practice all plans. Everything changes at one time or another, maybe an employee leaves or you adopt a new computer system. This makes it important to periodically practice your plans, review what worked and what didn’t, and update accordingly.
  6. Work with an expert. Planning for disaster is a tough thing to do well, considering all the elements to focus on and work with. To ensure a viable plan for your business, working with a recovery expert can help ensure that you get a plan that works for you while taking the stress off.
If you’re worried about your business’s disaster preparedness, please contact us. We can work with you to develop a solution, or provide you with the information and contacts to set you on the right path.
Published with permission from TechAdvisory.org. Source.