SunGard Availability Services Building an Effective Availability Program

1
SunGard Availability ServicesBuilding an
Effective Availability Program

• Presentation for State Agencies

Presented by Brian Lewis Consulting Services
Director March 19, 2009
2
Agenda

• Availability Program
• Recovery Process
• Current State
• Desired State
• Roadmap to Recommended State
• Key Focus Areas

3
Information Availability Recovery Process
Recovery Point Objective (RPO)
Potential Transaction / Data Loss
Last Offsite Backup
Backup Offsite
Event
Vital Records
4
Information Availability Recovery Process
Recovery Point Objective (RPO)
Potential Transaction / Data Loss
Restore System / Application / Data
Crisis Management
SYNCHRONIZATION
Restore Applications
Restore Data
Restore Platform
Activate Incident Mgmt. Plan
Restore Network
Resume Business Operations
Return to Home Site
Last Offsite Backup
Immediate Response (Safety / Notification)
Restore Voice / Data Network Communication
Backup Offsite
Event
Restore Business Operations
Damage Assessment
Restore Business Process
Process Backlog
Relocate Business Operations
Disaster Declaration
Backlogged Transactions
Vital Records
Primary Site Restoration
Recovery Time Objective (RTO)
5
Current State

• Many BC/DR efforts are
• Fragmented and deployed in silos
• Duplication of effort
• Coordination between SDC, Agencies, and business
  units is not optimal
• Sharing of experience or best practices is not
  formal
• Metrics for measurement of performance is not
  formal

6
Desired State for Oregon SDC Agencies

• At desired state, Consolidated Agency
  Availability Program will
• Provide capabilities comparable with defined
  metrics and appropriate to Agency business needs
  while evolving towards the targeted state of
  maturity
• Encompass the enterprise and be embedded in
  Oregon's culture, policies, processes and
  procedures to ensure availability and
  recoverability are considered in all business
  decisions
• Demonstrate continual improvement driven by
  measurement against standards and ongoing
  reporting and assessment
• Decrease SDC's risks through a strong set of risk
  controls that minimize the opportunity for
  availability issues
• Increase Agency's level of confidence in its
  ability to recover through a regularly
  demonstrated ability to continue business and
  restore operations at a required level of
  capability within acceptable timeframes
• Address key areas of risk and business
  criticality to the company and continually
  re-assess that focus as the business evolves

7
Roadmap to Recommended State
Year 4
Year 5
Year 1
Year 2
Year 3
Maintenance Enhancement
Maintenance Enhancement
Refinement
Stabilizing the Foundation
Driving Improvements
Critical Gap Closure
Level of Standards Conformance
Program Maturation - Effectiveness efficiencies
Program Maintenance Enhancement
Risk Level
Resource Levels
8
IA Program Maturity Continuum
Information Availability Maturity Continuum

High
Low
9
How Information Availability-ready is your
organization?

• Do you have ...
• Clear understanding of business priorities and IT
  risks?
• Infrastructure and processes that meet
  compliance demands?
• Change management policies tieddirectly to
  information availability plans?
• Understanding of applications and hardware
  required to support business functions?
• Detailed procedures to respond to a virus that
  penetrates your network?
• Defined testing program with goals and measures
  in place?
• Backup strategy that supports both operational
  issues and disaster recovery?
• Documented responses to an outage of a critical
  business unit?
• Alternate facility from which to conduct business
  and/or IT operations?

10
Enterprise Availability Program Roadmap

• Continuous Improvement Data Security
  Staff Augmentation Technology Solutions

Validation Exercise
Profile
Content Manager and Crisis
Management Tool


Risk/Impact Analysis
Develop Plans
Strategy Analysis
Strategy Design

11
The road to Information Availability
Feedback Triggers
Project Schedule
Business Goals Requirements
Scenarios
Action Plans
Implement
Evaluate
Architect
Activate
Sustain

• Validation
• SituationManagement
• SolutionAssessment

• Assessment
• Profile
• Solution Roadmap

• StrategyAnalysis
• SolutionBlueprint

• Maintenance
• Enhancement
• Training

• Development
• SolutionDelivery

Solution Certification
Solution Delivery
Solution Roadmap
Solution Evolution
Solution Blueprint
Best Practices
Quality Efficient Delivery
Thought Leadership
Benchmark
Proven Solutions
Proven Track Record

• Assess-Review current capabilities against
  business requirements and information
  availability best practices
• Profile-Document dependencies and relationships
  between hardware, network, software,
  applications, processes, organizations, and
  locations
• Solution Roadmap-Gather data, analyze
  availability risks, determine potential business
  impact

12
The road to Information Availability
Feedback Triggers
Project Schedule
Business Goals Requirements
Scenarios
Action Plans
Implement
Evaluate
Architect
Activate
Sustain

• Validation
• SituationManagement
• SolutionAssessment

• Assessment
• Profile
• Solution Roadmap

• StrategyAnalysis
• SolutionBlueprint

• Maintenance
• Enhancement
• Training

• Development
• SolutionDelivery

Solution Certification
Solution Delivery
Solution Roadmap
Solution Evolution
Solution Blueprint
Best Practices
Quality Efficient Delivery
Thought Leadership
Benchmark
Proven Solutions
Proven Track Record

• Strategy Analysis-Based on assessments results,
  explore and select strategies that will
  effectively support business requirements
• Solution Blueprint-Based on selected and approved
  strategies, design the availability solution

13
The road to Information Availability
Feedback Triggers
Project Schedule
Business Goals Requirements
Scenarios
Action Plans
Implement
Evaluate
Architect
Activate
Sustain

• Validation
• SituationManagement
• SolutionAssessment

• Assessment
• Profile
• Solution Roadmap

• StrategyAnalysis
• SolutionBlueprint

• Maintenance
• Enhancement
• Training

• Development
• SolutionDelivery

Solution Certification
Solution Delivery
Solution Roadmap
Solution Evolution
Solution Blueprint
Best Practices
Quality Efficient Delivery
Thought Leadership
Benchmark
Proven Solutions
Proven Track Record

• Development-Document action plan with
  responsibilities and responses to be performed
  when a situation occurs
• Solution Delivery-Provide support and management
  of selected Information Availability Strategy

14
The road to Information Availability
Feedback Triggers
Project Schedule
Business Goals Requirements
Scenarios
Action Plans
Implement
Evaluate
Architect
Activate
Sustain

• Validation
• SituationManagement
• SolutionAssessment

• Assessment
• Profile
• Solution Roadmap

• StrategyAnalysis
• SolutionBlueprint

• Maintenance
• Enhancement
• Training

• Development
• SolutionDelivery

Solution Certification
Solution Delivery
Solution Roadmap
Solution Evolution
Solution Blueprint
Best Practices
Quality Efficient Delivery
Thought Leadership
Benchmark
Proven Solutions
Proven Track Record

• Validation-Through exercises and simulations,
  validate Information Availability solution
  against business and technical objectives
• Situation Management-Monitor and report on
  validation exercises and actual situations to
  assess the success of the response related to the
  target metrics
• Solution Assessment-Review and benchmark your
  solution against industry best practices and
  standards

15
The road to Information Availability
Feedback Triggers
Project Schedule
Business Goals Requirements
Scenarios
Action Plans
Implement
Evaluate
Architect
Activate
Sustain

• Validation
• SituationManagement
• SolutionAssessment

• Assessment
• Profile
• Solution Roadmap

• StrategyAnalysis
• SolutionBlueprint

• Maintenance
• Enhancement
• Training

• Development
• SolutionDelivery

Solution Certification
Solution Delivery
Solution Roadmap
Solution Evolution
Solution Blueprint
Best Practices
Quality Efficient Delivery
Thought Leadership
Benchmark
Proven Solutions
Proven Track Record

• Maintenance-Update and certify performance levels
  of Availability Plans, and other aspects of the
  Solution as needed
• Enhancement-Develop program focusing on long-term
  management of Information Availability
  capabilities to manage business impacts and
  technology changes
• Training-Prepare employees to maintain
  established programs themselves, develop
  organization-wide awareness programs

16
Key Focus Areas

• Key areas of focus driven by
• Assessment findings ? Areas of opportunity
• Business drivers ? Defined through Program
  Assessment business discovery as well as a BIA
• Program maturity level ? Defines where in the
  lifecycle focus should be placed
• Criticality of Availability Program Components ?
  Some Components more critical than others
  (generally dependent on program maturity level as
  well as priorities for program development)
• Timing / program lifecycle position, industry
  targets, history

17
North American Facilities
More North American locations than any other
vendor
Calgary
Quebec City
Seattle
Montreal
Toronto (3)
Minneapolis
St. Paul (2)
Portland
Boston Marlborough (2)
Northbrook
Detroit
Carlstadt (3)
Wood Dale (2)
Cleveland
Queens
Indianapolis
Pittsburgh
Warminster
ThorntonDenver Aurora Englewood
Philadelphia
San Ramon
Herndon
St. Louis (2)
Huntersville
Nashville
Charlotte/Raleigh (2)
Scottsdale
Atlanta (2) Alpharetta
Cypress
Facility Types Managed IT Services, Recovery
Workgroup Recovery Workgroup Managed IT
Services Workgroup process center
Smyrna
Phoenix
Las Colinas
Dallas
San Diego
Grand Prairie
Austin
Honolulu, HI
Houston (3)
Orlando
Metepec, MX
18
SunGard Global Network Backbone
Seattle
Montreal
London(LTC)
London(Docklands)
Minneapolis
Toronto
Portland
GrandRapids
Milwaukee
Rochester
Chicago
Boston
Detroit
Buffalo
Des Moines
Newark
Cleveland
NYC
Pittsburgh
Philadelphia
Harrisburg
Denver
Indianapolis
Voorhees
Columbus
Baltimore
Kansas City
Cincinnati
Washington DC
St. Louis
Richmond
San Francisco
Charlotte
Nashville
Phoenix
Anaheim
Atlanta
Jackson
Birmingham
San Diego
Dallas
Austin
Jacksonville
New Orleans
Houston
Orlando
West Palm
Miami
Metepec, MX
San Juan
19
Recovery Services - Systems

• Server Capabilities (by supported O/S)
• Windows / Linux 2,400
• Solaris 560
• HP-UX 230
• AIX 130
• - Tru64 60
• i5OS 20
• - OS/400 10
• Over 75,000 MIPs
• Over 900TB of Disk Storage(EMC DMX, Hitachi USP,
  IBM DS8xxx, HP EVA, 3PAR, NetApp FASxxxx)
• Wide range of Tape Libraries, Tape Drives,
  Optical Storage
• Support for Legacy Systems / Architectures

Facilities
Systems
Workgroup
Quick Ship
Network
Mobile
20
Recovery Services Work Group / End User

• 26 Facilities across North America
• Over 7,200 end-user positions
• Over 5,400 desktop PCs
• Complement of office technology throughout
  centers (printers, copiers, scanners, etc)
• End User Services Offerings
• Drive Imaging
• Trading
• Voice
• Additional Item Processing Services

Facilities
Systems
Workgroup
Quick Ship
Network
Mobile
21
TRADITIONAL RECOVERY Server Recovery
File Server
Print Server
ProductionServers
BackupServer
22
TRADITIONAL RECOVERY Network Server Recovery
OS
File Server
OS
Print Server
OS
OS
OS
ProductionServers
Primary NetworkServers
BackupServer
23
RPO RTO AdvancedRecovery Solutions
TransactionsNot Captured
TransactionRecreation
Declaration
Start-Up Network
Data Retrieval
DatabaseRestore
SystemRestore
Transit
Traditional Recovery
Standby OS
Vaulting Services
Replication Services
Hours Required to Resume Business (RTO)
Failover
Hours of Lost Data (RPO)
24
AdvancedRecoverySM with Vaulting Service
SunGard Data Center
VaultedCustomerData
VaultDirector
SunSolaris
O/S 400
Vaulting serversmust have a softwareagent
installed.
Vaulting servers must have a software agent
installed.
25
AdvancedRecoverySM with Server Replication
26
AdvancedRecoverySM with Storage Replication
27
Is technology the whole story?

• Technology is important, but it doesnt
  constitute a DR plan or an ongoing program to
  manage and measure continuity. To be certain
  that you are truly prepared, you should have
  documented plans for all risk scenarios, a
  strategy for continuously updating plans as a
  part of change and configuration management, and
  a testing strategy. The most advanced technology
  in the world is useless if you dont test.
• Source Forrester, Stephanie Balaouras, Building
  The Business Case for Disaster Recovery
  Spending, 3 April 08

28
Discussion and Next Steps