Practice Makes Perfect in Disaster Recovery Testing

October 20th, 2009

I can still recall a moment from my childhood where my world was shaken to its very foundation by an Uncle of mine. We were at a family picnic and knowing I had just learned the basics of addition and subtraction, he knelt before me and asked a very peculiar question: “How many fingers do you have?” With a proud smile, I immediately let him know that the correct answer was ten.

“I’m sorry sweet child, you actually have eleven” my Uncle replied. So convincing was his statement, I had to look down at my hands for a recount

As I sat down to write this post, I realized that for the first time since that fateful ’11 finger day’, I was about to boldly state my opinion as fact and there wasn’t a single person alive who could argue against it. Moreover, unless you’re my Uncle, I dare you to try. *wink*

In my daily experience speaking to businesses of all types, I must commend the organizations I come across that have taken the initiative to put a Disaster Recovery Plan in place. It’s a clear indication that they have tried to plan for both the expected and unexpected events that may impact their day-to-day operations.

Unfortunately, the fact remains that the majority of businesses have never tested their recovery plan. How can you be secure in your organization’s ability to function as expected during an actual crisis without first putting it to the test?

Perhaps the word ‘test’ attaches a ‘pass/failcriterion and should instead be looked at as more of a practice or drill. Most businesses who have been through a testing of their recovery plan will tell you that there is no such thing as a ‘failed’ test. These exercises are designed to bring certain realities to the surface that may not have been thought about without going through a dry-run. I can certainly understand the satisfaction of being able to put a checkmark in the ‘DR Plan’ box and moving along with the rest of the day’s agenda, but without actually testing the validity of your plan, you can never be certain it will work when needed.

Testing may seem to be a monumental task. At Agility Recovery, we encourage our members to test annually – ensuring their plan stays current, well documented and effective. With staff dedicated solely to assisting members with these needs, we are constantly striving for ways to encourage businesses to test their continuity initiatives. Testing should be a vital component of your continuity plan, not an afterthought.

At this point, I’m curious to know if you’ve found a bone of contention. I think it’s difficult to argue the solid tried and true saying “practice makes perfect”. Where would we be without wedding rehearsals, spring training, or fire drills? Tiger Woods would have no problem telling you that he can attribute almost all of his success to practice. There isn’t any logical harm that can come out of practicing, rehearsing or testing something as important as a disaster recovery plan, which is why we invite you to attend a FREE educational webinarBest Practices of Testing Your Recovery Plan” on October 28 at 2 p.m. (EST).

My Uncle continued, “if you say you have ten fingers, then on your left hand, count backward from ten.” I followed his instructions implicitly. Starting at my thumb I counted down to my pinky, “ten, nine, eight, seven, six.”

He looked at me now, smiling. “And how many fingers are on your other hand?”

“Five.” I answered hesitantly.

“Now my boy,” his grin widening, “What is six plus five?

I learned a very important lesson that day – no matter how certain you are of something, there is always someone willing to argue against you.

With that said, any business looking to survive an interruption (expected or otherwise) would have a hard time arguing the importance of testing, as our preparedness can only make us, and our processes, better.

Oh don’t worry, I’m not naïve, I know there are a few of you out there that have found something to argue with me about. I can almost feel the blood pressure rising in some of you as you read this, angered at my gall to tell you what is ‘fact’ without the opportunity for a fervent discussion. For this, I offer my sincerest apologies. Of course, if I have made you angry, just do what was taught to me to help calm yourself down.

Put your hands straight out in front of you, close your eyes…and count to eleven. And feel free to leave a comment below.

- Jonathan Prasad
Agility Recovery Solutions
Agility Disaster Recovery & Business Continuity Solutions
Our Agility Blog
Follow us on Twitter here

VIDEO: 09.30.09 Creating a Culture of Preparedness (National Preparedness Month)

October 2nd, 2009

FEMA Administrator to Speak on Creating a Culture of Preparedness for Disaster Recovery

September 28th, 2009

Fear…it’s an emotion shared by all creatures, both man and beast. The only difference between these two subsets is that man has been blessed with the ability to consciously choose how to react to fear inducing stimuli as opposed to simply being hard-wired to respond instinctively.

When I was quite young, my father had once asked me what I thought was man’s greatest fear. When I replied with what I undoubtedly believed to be the correct answer, spiders, he proceeded to tell me that the correct answer was “the unknown”. Of course, I didn’t believe him at the time, since the only thing scarier than a spider was perhaps an unknown spider that may have crawled into my ear while I slept. However, with age comes wisdom and through the years not only have I found the sword to slay this ‘unknown spider’ but I’ve also made some interesting observations.

Now, we’ve all had those horrible nightmares where you are seated in the auditorium with the final exam on your desk, realizing you hadn’t studied at all (unfortunately for me, this wasn’t so much a nightmare as it was a true story). You might have also dreamed of being in front of your classmates, clad only in your underwear, while frozen in place, unable to hide your embarrassment (again, another unfortunate true story). If you’ve ever given a presentation, you know all too well the frightening thought of being bombarded by questions you wouldn’t be able to answer. After pondering on these many misfortunes in my life, I came across the answer. The silver bullet or the sword to slay the unknown spider is preparedness.

It is only the foolhardy who go through life without taking responsible steps to plan for the unknown (another one of Dad’s pearls of wisdom). It is the reason we have life and car insurance, fire extinguishers, first aid kits or that spare tire in your trunk. It’s all for the just in case. Should the unexpected occur, most people would have no problem dealing with the situation by putting these preparedness tools into action.

Why is it then that so many businesses fail to prepare for unexpected events? It is astounding how many people don’t have an answer when asked “what would you do if your business suffered an extended power outage?” The same silence is heard when asked about a host of other hypothetical yet highly plausible events. Is it simply because so many days have gone by without incident and we just decide that the ‘unexpected’ won’t occur? Or perhaps it is complacency, or even the fear that planning for an event means uncovering a very real risk exposure to the business with no way to cover it. Whatever the reason, it is blatantly obvious that the old adage stands true, “If you fail to plan, you plan to fail.”

I’d like to take this opportunity to use another old adage, and that is “It’s never too late.” Even if your preparedness plan is simply just some phone numbers for emergency vendors scrawled on a napkin in the top drawer of your desk, it is truly never too late to get a solid preparedness plan in place. Most businesses begin with a risk assessment, determining what exposures threaten the day to day operations of the business. You must take into account all facets of your business, your key elements being your workspace, power, connectivity (your phones and internet access) and your technology. Most importantly, you must have a plan that incorporates your people, as no business can function without its employees. You may also take comfort in the fact that you don’t have to do this alone. Agility is committed to providing the necessary tools to assist businesses in getting prepared and staying that way.

As September is drawing to a close, we are proud to present the final webinar in our FREE 2009 National Preparedness Month series. On September 30 at 2:00pm EST, the acclaimed former Administrator of FEMA, Mr. R. David Paulison, will discuss the need to re-energize America’s commitment to personal, family and business preparedness. Creating a culture of preparedness is critical for helping all of us better prepare for disaster response and recovery.

I strongly recommend you attend this particular webinar, so the next time someone says you “have nothing to fear but fear itself”, you can shoot them back a smile, wink knowingly and correct them with confidence. You can let them know that what we really fear is the unknown, and once we learn to adopt a culture of preparedness, we really have nothing to fear at all. Well, except for maybe spiders.

- Jonathan Prasad
Agility Recovery Solutions
Agility Disaster Recovery & Business Continuity Solutions
Our Agility Blog
Follow us on Twitter here.

VIDEO: 09.23.09 Social Media & Business Continuity (National Preparedness Month)

September 28th, 2009

VIDEO: 09.16.09 Pandemic Planning Webinar (National Preparedness Month)

September 28th, 2009

VIDEO: 09.02.09 Business Preparedness (National Preparedness Month)

September 28th, 2009

Department of Homeland Security Expert Weighs In On Pandemic Disaster Planning for Businesses

September 14th, 2009

As we all had just become immune to the daily news reports highlighting the global economic climate, a new headline burst upon the scene earlier this year causing yet another ripple in an already stunned and battle weary business community. At the start of the summer, The “Swine Flu”, or H1N1 virus was declared a true pandemic, and with that, forced businesses everywhere to take a close look at their level of disaster preparedness.

Having lived through the 2003 Severe Acute Respiratory Syndrome (SARS) outbreak in Toronto and experiencing the disruption first-hand, I was all too familiar with the imposing threat. During SARS I witnessed businesses and hospitals quarantine sections of buildings to contain possibly infected individuals. A cough or a sneeze on a subway car would cause fellow passengers to hold their breath or quickly shuffle further upwind. It was not uncommon to see people going about their daily business with their identities half hidden by the face masks that filtered their breathing air. As I thought I had seen the last of such an Orwellian vision, I now flash forward six years to yet another.

 After all the media hype during the spring H1N1 outbreak, and relatively little impact, many people have become complacent and in some cases even cynical. The perceived threat level has somewhat diminished since the announcement earlier this year, but it does not mean that the risk is negligible. Pandemic fatigue is a real issue. It is important to recognize the potential impact it may have and how to prepare your family, your community and your business.

 Headlines relating to H1N1 are beginning to resurface so this begs the question, is MY business prepared? Unfortunately, there are many businesses whose only contingency plan consists of the following rule: “If you’re sick, don’t come to work”. Unfortunately, this is a rather narrow minded solution that would cripple a business once all its critical resources were sequestered at home.

 The good news is that while most disasters are difficult to plan for due to the wide variety of possible interruptions, a flu pandemic has specific elements that can be prepared for, even if you haven’t had an extended period to plan. Below are just a few points to help your business stay prepared:

  1. Educate our employees about H1N1 symptoms, basic infection control and the possible business consequences.
  2. Encourage employees to get H1N1 flu vaccinations when they become available.
  3. Create, review and/or update your plan
  4. Ensure your plan includes a way for employees to effectively work from home and that communication remains open within all departments of your business.

This list obviously just skims the surface. It is however a good starting point.  

For more detailed information about H1N1 and how to better prepare your business register for Agility’s free webinar Pandemic Planning – How to Prepare Your Business for the Upcoming Flu Season, this coming Wednesday (9/16). Our expert speaker, Colonel William Lang (Ret.), M.D., is the Former Associate Chief Medical Officer for the U.S. Department of Homeland Security and is among the world’s foremost experts in medical contingency planning and public health response to biological incidents, including both pandemic and bio-terrorism events. You will not want to miss this!

In support of National Preparedness Month Agility Recovery Solutions is hosting free webinars throughout the month of September and we have an outstanding lineup of nationally recognized speakers. Visit our site to learn more.  

- Jonathan Prasad
Agility Recovery Solutions
Agility Disaster Recovery & Business Continuity Solutions
Our Agility Blog
Follow Us on Twitter @ http://twitter.com/AgilityRecovery

Just How Ready Are You to Recover from a Disaster?

August 27th, 2009

Okay, here’s a thought…after a disaster 1 in 4 companies will never recover. Their business will cease to exist; it will shuffle off this mortal coil; it will be an “ex-business”. 

 

Obviously the idea is to stay in business and emerge from any interruption with the self-satisfied grin of someone who has prevailed in the face of adversity. The big question is how do we achieve that ideal?

 

I think, and I’m hopeful people will agree, that the most important thing is to prepare for and have a disaster recovery plan in place. Not just your business, but also your family and even your community. The problem, as I see it, is that there are lots of different ideas regarding what constitutes being prepared and quite honestly, the idea can seem a bit daunting. Where do you start? How do you put it down on paper in a coherent fashion as part of your comprehensive disaster recovery plan? Oh, and by the way disaster recovery is NOT just IT, so take that way of thinking, and lock it in a darkened room somewhere.

 

In the interest of prompting discussion and/or thought, let’s throw some ideas around.  I, along with the Federal Emergency Management Agency (FEMA), would suggest that there are three simple, but, important steps:

 

1.                    Plan to stay in business

-          Start with the basics and keep it simple, look at how your company currently functions and which of those functions it cannot do without.

-          Identify potential disasters, plan accordingly, and look at everything from server/network failures, to power outages, floods or hurricanes (or whatever obnoxious weather you get in your particular corner of the country). Even look at complete loss situations like fires.

-          Consider financial disasters. What will happen if you face a lawsuit? How will you recover?

-          How and where will you get your employees back to work if your building is inaccessible (or flat out no longer there)?

2.                    Talk to your employees

-          Encourage them to think about and plan for their families during a disaster.

-          Make brain-storming a part of the planning process and include staff from all levels of your business.

-          Identify the key people in your organization who will play a vital role in any recovery, and make sure they know what to do.

-          Use drills and exercises to test your recovery plan, make sure that it works, and that each person is capable of fulfilling their role.

-          Put some kind of contact plan in place. How will you communicate with your people when the phones and internet go down?

3.                    Protect your investment

-       Make sure you have a contingency for utility interruptions.

-          Implement a security plan for your buildings and satellite locations.

-          Talk to your vendors about their recovery plans and work together to ensure mutual survival.

-          Make sure your insurance coverage extends to all manner of disasters, especially natural ones, and will cover you for recovery costs.

 

I realize that this is hardly a comprehensive list. I do, however, think it is a good starting point for those of you who are new to disaster recovery planning or are feeling rather overwhelmed by the whole thing. Even for those of you who have been doing this for a number of years I hope this will give you something to think about the next time you cast a critical eye over your plans.

 

If you would like more information, ideas, and/or checklists to help in your disaster recovery planning, please have a look through the resources available on our website or visit Ready.gov. Alternatively, you can call us on 1.877.364.9393 and ask to speak to one of our consultants about the Roadmap to Recovery.

 

In support of National Preparedness Month Agility is hosting free webinars throughout the month of September and we have an outstanding lineup of nationally recognized speakers. Join us next Wednesday 9/2 for Business Preparedness – Simple Steps to Ensure Continuity with guest speaker Rebecca Marquez, Acting Director of the Ready Campaign from the Federal Emergency Management Agency.  You won’t want to miss it! 

 

- Ben Pritchard

Agility Recovery Solutions

Agility Disaster Recovery & Business Continuity Solutions

Our Agility Blog

Follow Us on Twitter @ http://twitter.com/AgilityRecovery

September is National Preparedness Month!

August 18th, 2009

It’s coming to that time of year again, where everyone here at Agility starts getting all excited (more than usual anyway) about National Preparedness Month. This marks our 5th year as an official sponsor of National Preparedness and it’s looking to be our best event yet. So without further ado, let’s take a look at September’s National Preparedness Month (NPM), a nationwide effort to encourage citizens to take simple steps to prepare for emergencies in their homes, businesses and schools.


As you may know, during NPM, the Federal Emergency Management Agency (FEMA) will work with a variety of organizations to highlight the importance of emergency preparedness and promote community involvement through events and activities across the nation.


Here at Agility Recovery Solutions we are joining in the effort to help educate all businesses about the importance of business continuity planning. To that end, Agility is hosting four free Webinars this September on Wednesdays at 2:00 p.m. EDT (11:00 a.m. PDT) with an outstanding lineup of nationally recognized speakers. Topics include:


September 2, 2009“Business Preparedness – Simple Steps To Ensure Continuity

Guest Speaker: Ms. Rebecca Marquis, Acting Director of Ready Campaign, Federal Emergency Management Agency (FEMA)

Invite a Friend


September 16, 2009 “Pandemic Planning – How to Prepare Your Business for the Upcoming Flu Season”

Guest Speaker: Colonel William Lang (Ret.), M.D. Former Associate Chief Medical Officer, U.S. Department of Homeland Security (DHS)

Invite a Friend


September 23, 2009“Social Media – What Role Does It Play in Business Preparedness?”

Guest Speaker: Mr. John P. Shea, Public Information Officer, Federal Emergency Management Agency (FEMA)

Invite a Friend


September 30, 2009Creating a “Culture of Preparedness”

Guest Speaker: Mr. R. David Paulison, Former Administrator, Federal Emergency Management Agency (FEMA)

Invite a Friend


At Agility we are often found espousing the importance of thorough disaster recovery planning and being properly prepared for whatever nastiness and general unpleasantness that may come your way. Have a listen to what these four nationally acknowledged experts have to say and benefit from their years of experience. Now you really don’t have to just take our word for it, take theirs too!


Personally I shall be sitting in on all four webinars, and would advise each of you to do the same. This is an impressive lineup of speakers and I sure don’t want to miss it.


Visit Agility for more information or click on the links above to register today!


Ben Pritchard

Agility Recovery

http://www.agilityrecovery.com

http://www.ouragility.com

http://twitter.com/AgilityRecovery

Test Yourself (and Your Disaster Recovery Plan)

August 12th, 2009

I blogged about preparedness in my previous post “The Devil is in the Details” and I stand by the fact that it is important to spend hours lovingly crafting the most detailed and comprehensive plan known to mankind.  But, how do you know your plan will work?  What if a disaster comes knocking at your door and you find your hours of labor have resulted in nothing more than a lot of procedures which don’t actually work?  I’ll tell you what, you’re in trouble.

 

Fortunately for you, I have the answer (predictable, aren’t I?), and it really is quite simple – Test your disaster recovery plan.  Test every aspect of it, and if you’re not satisfied with the results go back, refine it and then test some more. 

 

A perfect example of the importance of regular testing is provided by two medium sized New Orleans businesses that were all but shut down during Hurricane Katrina.  Both had previously put on paper comprehensive disaster recovery plans, integrating all departments and managerial levels in a holistic approach which laid out clear plans of action for all employees given a variety of disaster scenarios.  What was the difference between the two businesses?  One had carried out disaster recovery tests, focusing on each process and procedure.  The other (you guessed it) had not. 

 

The business which had previously tested activated its recovery plan, called in Agility, and experienced a smooth, efficient recovery.  Calm efficiency prevailed and everyone knew their roles and responsibilities.  The net result was that the business was up and running within a couple of days.

 

As for the business that did not test, well – while they had information down on paper – that wasn’t quite enough. Roles and responsibilities had not been clearly defined, company employees were not sure what they were supposed to be doing and there was a lack of communication within the organization.  They activated their recovery plan; however, there were many kinks in the road to recovery.  Unfortunately, chaos reigned within the business.  Fortunately, Agility brought things under control and had the resources and facilities in place in time for the member to bring its people back.

 

I know what you are thinking – the quicker recovering of the two businesses must have been a bit larger and obviously had plenty of resources and money to throw at the problem.  Maybe they did, but so what?  What relevance does size have in the world of disaster recovery planning, where success or failure can come down to the smallest detail?  Regardless of size, every business needs a plan and every business needs to test that plan. 

 

There are ample resources and educational webinars available to businesses of every size for little to no cost.  Did you know that a standard recovery test costs an average of $2,000?  It may sound like a lot but it’s worth every penny if the doors to your business are able to stay open following a disaster.  And it proves the point that you don’t need to spend hundreds of thousands, or even millions, on your disaster recovery strategy.

 

And that brings me back to my main point, which is that not only do you need to plan, but you need to test at every level within your business.  Make sure every critical employee and manager has a copy of your plan and knows how to react to any given situation, whether it is something as simple as a failed server or as devastating as a complete building loss.  Communicate, evaluate, test internally with table-top exercises, test externally with your vendors and make sure they can continue to operate during a regional disaster like a hurricane or a wild fire.  Have your IT team practice switching over to a recovery site, find alternative sites to use in the event your building is inaccessible, and put in place disaster communications and action plans that can be activated not within hours, but within minutes of a disaster event.

 

Obviously I am going to be a little biased when it comes to the subject of testing disaster recovery plans, since I am a testing consultant.  Testing is what I do.  However, I don’t think you can ever understate the importance of regular and thorough testing.  Be aware of the things that could make or break your business during a disaster and make sure you set your business up to be a survivor.  Trust me, you’ll feel much better for it, and you’ll probably sleep better at night too

 

Check out our latest Testing Your Recovery Plan – Agility Answers Your Questions archived Webinar for more information on disaster recovery services.

 

Want to learn more about the complete range of testing solutions Agility offers?  Please visit Agility or call 877-364-9393 and ask to speak to one of our testing consultants.  You never know, you might even end up talking to me! 

 

 

Ben Pritchard

Agility Recovery

http://www.agilityrecovery.com

http://www.ouragility.com

http://twitter.com/AgilityRecovery