What you will learn in this tip: How to select the best managed business continuity service provider for your business continuity (BC)/disaster recovery (DR) planning services, and how to get the best results.
The managed services industry is huge. Within the business continuity and disaster recovery professions, many managed services providers' offerings focus primarily on protecting data centers, systems, applications and data. They may offer business continuity/disaster recovery services outside the technical side, but that's generally not their real focus. One of the main aspects of a managed business continuity service provider is to offer a selection of disaster recovery services, generally for monthly fees. This article looks at another aspect of BC/DR managed services: the provision of DR/BC planning services, and offers tips to help you select the best provider, obtain the best deal, and get the best results.
|
||||
Managed business continuity/disaster recovery planning services work to remove the responsibility of performing business impact analyses (BIAs) and risk assessments, develop and exercise plans, organize awareness and training programs, maintain plans and related documents and facilitate audits and other quality management activities. And these managed BC/DR planning services provide all of these activities using an experienced third party for a fee.
Naturally, you could make the case for a one-time project that covers all or some of the above activities. At the end, you'll have business continuity/disaster recovery plans, and that's about it. If that's sufficient for your needs, you may not be a true candidate for managed services.
However, if your firm recognizes the importance of protecting all aspects of its business operations, supply chain and other assets, but may not be willing or able to have the staff and overall financial commitment to a formal BC/DR program, a managed business continuity/disaster recovery planning option may be the answer. Also, if you already have a disaster recovery or business continuity program, and are concerned about the overhead costs, especially for personnel and office space, a managed service offering may also be a good alternative.
For very large companies, such as banks, that have well-developed BC/DR programs, a managed service option could be a major cost saving. It may even be possible for the managed services firm to acquire the company's BC/DR staff as part of the agreement. This is not uncommon in situations when large IT departments outsource all or part of their operations to a third party.
Pricing for business continuity services vary according to size of company
Numerous companies offer business continuity and disaster recovery managed services. These include Agility Recovery, SunGard Availability Services, CA, Cervalis, Consonus Technologies Inc., EMC Corp., IBM Corp., EMC, Iron Mountain, Lootok, Ltd, Paetec, Paradigm Solutions and Telehouse America, to name a few. Pricing for managed services is fairly straightforward if the issue is managing specific items, such a desktop system environment or deploying an intrusion detection system.
For example, Dell's "direct-from-Dell" managed services costs are:
• Alerts: $9 per desktop or laptop per month; $59 per server per month
• Resolution: $39 per desktop or laptop per month; $199 per server per month
• Management: $59 per desktop or laptop per month; $299 per server per month
By contrast, more specialized managed services pricing can be quite variable, as individual situations do not always fit into neat packages. For budgeting purposes, a range of fees for managed business continuity planning services is for small firms: $200 to $1,500/month; medium-sized firms: $600 to $3,500/month; large firm: $1,000 to $6,500/month. If the managed services arrangement also includes acquiring the client's existing staff, the cost could easily double or triple.
Tips for choosing a business continuity service
Regardless of your situation, if a managed business continuity service option is being considered, be sure to consider the following tips. Remember that this type of service is for BC/DR planning activities. If you already use a managed services firm for IT operations, remember, that firm may be able to layer the planning component on top of its existing activities.
Steps to take if you have no or minimal business continuity/disaster recovery activity
Managed business continuity/disaster recovery services offer yet another way to operate an internal business continuity/disaster recovery organization, but they do so without the overhead associated with an in-house operation. Check the candidates carefully, be sure of what you are getting before you sign contracts, and include a process to regularly evaluate the managed services firm to ensure you are getting the best value for money.
About this author: Paul F. Kirvan, FBCI, CBCP, CISSP, has more than 20 years experience in business continuity management as a consultant, author and educator. He is also secretary of the Business Continuity Institute USA Chapter.
21 Jun 2010