7 Habits of highly resilient organizations.

• Author: Godlewski, Jeff
• Position: BUSINESS CONTINUITY

When disasters strike, small-and mid-sized organizations without sufficient resources or continuity plans are especially at risk. More important than an organization's physical property is ensuring the integrity of its data, communications capabilities and the information technology infrastructure to support both.

The recommendations that follow can help prevent costly downtime, reduce customer inconvenience and minimize any reputational damage.

1 Conduct a business impact assessment.

Because even the most thorough disaster preparedness plan won't justify the cost of including every process, it is important to inventory and prioritize critical processes for the entire organization. Those that need to be resumed within 24 hours or have a major effect on stakeholders could receive an "A" rating. Those that need to be resumed within 72 hours could receive a "B" rating.

Software can help an organization assess its disaster preparedness and map effective strategies.

2 Take steps to protect data.

Aside from people, information is the single most critical asset for virtually any company. Data should be backed up frequently and organizations should consider upgrades to faster versions. Automated remote backup services are available from many vendors.

Multiple copies of data should be stored offsite. Outsourcing this service may make sense for small-and mid-sized companies that don't operate in a suitable alternative location.

There are several and affordable approaches to backing up data:

Tape Rotation: The most basic approach involves copying information on servers to storage media (typically tapes) on a set schedule that are moved offsite safe storage.

Data Replication: Information on servers in one location is copied--in real time or on a set schedule--to servers in another location. The offsite server then takes over operations if the primary server is damaged.

Appliance Backup: This allows for a mirror image of the data on the server, but does not include offsite facilities should the primary server infrastructure be destroyed.

Data-Vaulting Facilities: Information on servers is copied to an onsite central depository, then replicated to an offsite data-vaulting facility typically owned by a third-party.

Organizations also need to take steps to ensure employees can remotely access that data if they are unable to work in the office. Remote-access software can enable employees to access networked server or desktop information offsite.

3 Review...