Post on 25-May-2015
description
Preparing Your Supply Chain for
the Unknown One Contract at a Time
SCOPE East 2010
What Do These Have in Common?
2
Overview
• Not if But When - the Evolution of the Threat Landscape
• Challenges
• Get the Basics Right
• Understanding Recovery Options for Infrastructure
• Contracting & Spending Pitfalls
• Action Items
• Summary
3
Not IF – but WHEN
8
Statistics and impact
•43% - immediately out of business•6% - survival rate•86%, 85%, 72% - mature testing plans
Challenges
9
Preparedness vs. Budget
Challenges
10
Vendor Advantage
New Levels of Interconnectedness
11
1. Conduct an Enterprise Risk Management assessment
2. Essential functions + key people + cross-training
3. Secure data
4. Establish redundant infrastructure
5. Document and exercise – test times, terms, notification fees can all add up.
Five Steps For Success
12
Strategies for Infrastructure
13
Traditional - Hotsite, Coldsite, Quick-ship
• Advantages•No other option is available•Single-site
• Disadvantages•Expensive•No success guarantee•Test time •Control to the vendor•Disaster declaration approval needed
• Cost Considerations•Expensive•Contract lockdown•Switching costs
Strategies for Infrastructure
14
Advanced Recovery
• Advantages
•Ideal for large-scale regional outages•Dedicated recovery and test environment•Reduced RTOs •Minimal risk for data loss
• Disadvantages•Suitable for companies with many geographically-disbursed locations•Risk of “rolling disaster”•Many contracts
• Cost Considerations•Data Center Environment
Strategies for Infrastructure
15
Outsourcing – High Availability
•Advantages•Suitable for small organizations•Resource optimization + flexibility + control
• Disadvantages•Incompatibility•Performance •Many contracts
•Cost Considerations•Cost of making application portfolio “cloud-ready”
Spending Pitfalls
16
• Pitfall: Locked into traditional DR contracts
•Mitigation:• watch out for auto-renews and other T’S and C’s•Buyouts•Work with alternate providers
• Pitfall: Not cloud ready - apps not portableRe-writing and migration costs can be high
•Mitigation:•Open up 6-8 not just 2-3 options•Use external market resources
Spending Pitfalls
17
• Pitfall: in-house spending traps for plug, ping and power
•Mitigation:• optimize energy/utility bills, with NPI• Datacenter pricing- negotiable
• Pitfall: Licensing – contingency pricing
•Mitigation: Negotiate spike license pricing with experts
1818
Action Items
18
1. Conduct an Enterprise Risk Management assessment
2. Essential functions + key people + cross-training
3. Secure data
4. Establish redundant infrastructure
5. Document and exercise – test times, terms, notification fees can all add up.
Be wary of predator pricing – high variability
Make sure you prioritize
Security vendors pricing is highly disparate
Know your options well – and seek advice
There’s no substitute for testing
Questions
19