ITD CIO Meeting

1
ITD CIO Meeting

• 2nd Data Center Status
• Continuity Preparedness Gap
• May 30, 2007
• Ed Swartz, Dir. Continuity Planning

2
Agenda

• 2nd Data Center Status
• Requirements for DC2
• Continuity Preparedness Gap
• Business Unit Expectations
• Business Unit Readiness Sate
• IT Availability Capability Options
• Executive Directive
• The Gap Mitigation Process

3
2nd Data Center Status

• Tier 3, 7x24x365 Co-processing center to MITC
  that will also serve as a DR and storage back-up
  facility. 20,000 sq.ft. upgradeable to 40,000
  sq.ft.
• Two Springfield sites being considered
• Cost study completed on design to build site
• Cost study in-process for a retro-fit site, due
  6/15
• Determination by end of June

4
Requirements for DC2

• By Nov 07 Phase 1 Agencies that we host and
  need to complete plans if they want their
  requirements in the 2nd Data Center.
• By Mar 08 Phase 2 Agencies with business gaps
  and want to be in the 2nd data center.
• By Jul 08 Phase 3 - Remaining agencies who might
  want to be in 2nd data center.

5
Continuity Preparedness Gap

• The difference between the actual availability of
  an organization's information systems and the
  level of availability expected by its business
  units.

6
Business Unit Expectations

• Business Units are expecting a certain level of
  availability for data, hardware, software, and
  communications.
• Most business units assume that because all data
  flows to IT for storage and backup, that they
  will have a full computing utility at all times,
  no matter what.

7
Business Unit Readiness State

• Determine how long you can survive without access
  to business data.
• Could you maintain operational control?
• What are your acceptable levels of loss?

8
IT Availability Capacity

• ITDs infrastructure does not support continuous
  availability for every system or every business
  unit.
• The extent of this responsiveness would be too
  costly to justify.
• ITD does not automatically provide disaster
  recovery capability for every hosted application.
  
• Yet every year more complex systems and
  components are added to the ITD infrastructure
  and expected to be recovered via DR tests.

9
Typical IT Availability Options / Costs

• Continuous Availability
• High Availability
• Traditional Recovery (tape)
• Best Efforts
• Mins Hours Days
• () Elapsed Time (RTO) ()

10
Governors Directive May 2, 2007

• The Commonwealths Information Technology
  Division (ITD) has embarked on an Executive
  Department agency-wide Business Continuity
  Program (BCP) initiative in complement to the
  overall COOP initiative.  The overall objective
  of the BCP is to enhance the recovery of
  applications that deliver the mission critical
  business functions of the Commonwealth.  The
  goals of the program are to design and architect
  a resilient technology infrastructure and work
  directly with each agency to develop a business
  continuity plan for recovery of operations. This
  program enables ITD to identify the agencies
  collective technology disaster recovery
  requirements in order to build out and provision
  for the second IT data center. 

11
The Gap Mitigation Process

• Respond to the Governors joint directive for
  COOP and Business Continuity by laying the
  groundwork to position BCP as a priority and to
  understand the extent of the gap.
• Execute ITD Business Continuity exercise to help
  business units decide what is mission critical
  and to collect applicable systems and functions
  data.
• Convert business system needs into IT
  availability options based upon critical function
  requirements.

12
Questions ?