Locating a disaster recovery (DR) site requires careful preparation and research; it's not just a matter of finding the cheapest space. When considering the option of an alternate recovery site, several considerations must be addressed right away:
- Why do you need an alternate recovery site?
- What systems, applications and data do you need to recover?
- How quickly will you need access to those assets?
- How many people will be needed to support the recovery site?
- What will the recovery site do when it's not being used for a recovery?
- What do you stand to lose, e.g., revenue, competitive position, if you can't recover within an acceptable time frame?
- How much can you afford to invest?
- What other alternatives to a recovery site are available?
Before you even consider the location of a recovery site, perform the due diligence suggested above. Advances in technology have yielded numerous options for a recovery site as compared to 10 to 15 years ago. Among the new options are the following:
- Virtualization of data center operations: This means your operational assets do not have to be in one location; they can be in multiple sites. If you have multiple office locations, one or more of these can be configured as a backup data center.
- Storage area networks (SANs) provide access to multiple data storage systems via high-speed networking; this multiplies your storage capabilities, minimizes the chance of a massive data storage disaster and ensures that your critical data can be replicated in more than one location.
- Specialized data backup centers are facilities that specialize in backing up critical data that is dynamically replicated at the main, and stored in secure data facilities.
Also, the traditional options of third-party hot sites, cold sites and outsourced data center/recovery operations are all still relevant. IT managers have plenty of options for backing up their operations before investing in a new data/recovery center. In fact, given the advances in technology, it is now possible to reduce the number of data centers a company needs. This is indeed a major market trend, and companies thinking about building a second or third data center would be well advised to consider the many alternatives available.
Assuming your firm has done its planning to either build a new data center or lease space and convert it, the following location issues are critical:
- The new facility should be on a different power grid than the primary data center.
- It should have access to at least two telecommunications service providers.
- It should have multiple telecom and power access routes into the building.
- It should not be near external situations that could present problems, e.g., near a major highway or rail line; close to fuel or chemical storage facilities; or close to a major airport, especially on/near the glide path.
- If located in an industrial park or similar site, there should be at last two access/egress points.
- It should be sufficiently distant from the main data center that a major disaster, e.g., blackout, brownout, severe winter storm, hurricane or earthquake does not impact the new location.
- Staffing the data center may require relocating existing staff or hiring new people. The investment in building the site could be considerable, factoring in the cost for construction, equipment, network assets, HVAC components, security and staffing.
Ensure that fire hydrants, the local fire department and emergency medical teams are nearby.
About this author: Paul F. Kirvan, FBCI, CBCP, CISSP, has more than 20 years experience in business continuity management as a consultant, author and educator. He is also secretary of the Business Continuity Institute USA Chapter.