Aftermath: Technology Tools and Services

Disaster recovery and business continuity planning are complex and highly specialized fields. Enterprises need detailed information to help them make mission-critical decisions about these technologies and services.

Business managers — not just IT managers — know that little of value is accomplished without planning. Planning for disruptions and discontinuity in business operations is particularly difficult. Disasters — large and small, natural and manmade — are by their very nature infrequent and unforeseeable events. Perhaps the key inhibitor to planning in this area, however, is denial — i.e., "It can't happen here." The 11 September 2001 terrorist attacks on the United States make it painfully clear, however, that "it" can happen anywhere, and enterprises must plan for disasters and their consequences. This section of our special Aftermath Spotlight examines the technology tools and services required for business continuity planning (BCP — see "Aftermath: Business Continuity Planning," AV-14-5138) and disaster recovery (see "Aftermath: Disaster Recovery," AV-14-5238) decisions. As recent events make all too clear, these decisions are and will continue to be critical to the survival of many enterprises.

When to Implement a BCP Software Application

Disaster recovery and business continuity planning (BCP) ensure that tactical procedures are in place to meet every type of challenge that can be realistically anticipated. Precautionary measures are frequently mandated by government regulation, industry policies or auditing requirements — but they are also simply good sense. Whether an enterprise should implement a BCP software application to assist with the task depends on a number of factors, including:

• Whether a business continuity plan is already in place
• Available in-house resources
• The degree of control local managers retain over business continuity

How can an enterprise assess these factors objectively and match its requirements to available solutions — high- and low-tech? Which solution justifies the sustained, enterprisewide commitment that BCP requires?

The tools and services section of this special edition of the Security and Privacy Spotlight gives detailed guidance for enterprises struggling to answer these mission-critical questions about disaster recovery and BCP technologies, services and vendors. We discuss the process of selecting technology vendors and service providers, and the fine points of contract negotiations in this highly specialized market, which is dominated by a small number of providers, with a few, smaller vendors handling special needs or specific platforms — this is of significant concern. One of the leading BCP providers is facing bankruptcy, and others are repositioning their offerings; therefore, we provide an overview to help in vendor selection. We also examine tools that can help decision makers assess enterprise risk and determine the potential effectiveness of prescribed safeguards. Finally, we offer profiles of several important disaster recovery solution vendors.

Features

"Building an RFP for Business Continuity Services ( TU-08-8887). The issues enterprises must raise in the requests for proposal to vendors. By Simon Mingay

"Negotiating a Sound Business Continuity Contract" ( DF-14-5239). Business continuity contract language, duration and other key issues. By Simon Mingay, Donna Scott and Roberta Witty

"Sourcing Recovery and Continuity Services" ( DF-13-5293). An examination of the potential benefits of insourcing, outsourcing or some combination of the two. By Simon Mingay

"BCP Tools: Your 'Friend in Business'" ( COM-13-6971). An overview of current BCP packages. By Kristen Noakes-Fry and Anthony Allan

"Business Continuity Moves From Management to Access" ( ITPS-WW-FR-0104). A market assessment and forecast, with key drivers and inhibitors. By Tony Adams

"SunGard Business Continuity Services" ( DPRO-90823). SunGard's disaster recovery solution, specializing in financial services. By Jennifer Gordon and Kristen Noakes-Fry

"IBM Recovery Services" ( DPRO-90811). IBM's disaster recovery solution. By Jennifer Gordon and Kristen Noakes-Fry

"Comdisco Business Continuity and Recovery Solutions" (DPRO-90807). A discussion of the offerings — and viability — of a major provider of BCP and DR tools. By Jennifer Gordon.