By clicking on the "Download archive" button, you will download the file you need for free.
Before download given file remember those good essays, control, term papers, theses, articles and other documents that lie unclaimed on your computer. This is your work, it should participate in the development of society and benefit people. Find these works and send them to the knowledge base.
We and all students, graduate students, young scientists who use the knowledge base in their studies and work will be very grateful to you.

To download an archive with a document, enter a five-digit number in the field below and click the "Download archive" button

Development of a business continuity and recovery plan

3.2 Business continuity plan in the event of an emergency

There are three main ways to develop a plan:

By own strength.

Using commercial business continuity planning software (demonstrations of these programs can be viewed or downloaded from the Disaster Recovery Journal, an independent American disaster recovery journal website.

Involvement of an external consultant to assist or directly develop the plan.

The methods differ in cost, but in all cases, the allocation of personnel for research and implementation of the plan is required.

Development on their own requires expertise in business continuity planning. This qualification can only be acquired through comprehensive training and experience. Most organizations do not have this capability.

The development of an enterprise business continuity plan must be organized as a project to manage tasks, deadlines, and deliverables. The main stages of a typical project are:

Organization of project implementation;

Risk assessment, reduction of undesirable consequences from the occurrence of risk-related events, analysis of consequences for business;

Development of a recovery strategy;

Documentation of the plan;

Education;

simulated disaster.

Organization of project implementation

Project management includes project administration, assumptions, meetings, and policy development.

Risk assessment. Risk assessment identifies the types of disasters that can occur in any given location. The physical infrastructure of the building and its surroundings are examined. For each type of disaster, an estimate of the possible duration is made and a relative value is assigned corresponding to the probability of their occurrence. A scale is used, for example, from 0 to 3; where 0 means improbable and 3 very likely. As a result, areas are identified in which further research should be carried out in order to reduce the consequences of events leading to risk.

Analysis of the consequences for the activities of the organization. After the risk assessment, an analysis of the consequences of the disaster on the organization's activities is carried out, during which the losses due to the inability to continue normal activities are determined. They may be obvious or more abstract in nature, requiring management to make a guess at the loss. In any case, the goal is not to get an exact answer, but to identify factors that are critical to the continued operation of the company. This step determines the scope of the business continuity plan. Excessive precautions will require extra funds, and insufficient ones will not provide adequate security.

Development of a business continuity strategy. Once the requirements are determined, a decision can be made on how to ensure the recovery of the activity. There are many options for technical solutions, including:

Use of a "hot" backup room. The supplier provides the company with a prepared working room with equipment, means of telecommunications, personnel performing technical support, etc., usually under an annual contract. Customers access equipment on a first-come-first-served basis.

Use of a "cold" reserve room. The company organizes work in an empty or rented premises, which is prepared for use. In the immediate aftermath of a disaster, equipment (possibly procured from vendors), software and support services are deployed indoors.

Use of internal reserves. For the provision of services in an emergency, the company's equipment is used, which is located in a different location.

Conclusion of an agreement on mutual support. An agreement is made with another company to share resources after a disaster. This assumes that the backup equipment always has the desired performance and you are satisfied with the degree of information protection during teamwork.

In some cases, a combination of these options may be used. Large multinational companies most often use the internal redundancy method for local area networks. Since there is a limited number of available back-up facilities, it may be that in case of an emergency there will not be a working space available to use. A regional disaster could result in all back-up space being occupied and the company having nowhere to resume operations.

A well-prepared plan ensures the company step by step instructions corresponding to the type and severity of the disaster. It indicates the functional groups of specialists of the company, prepared for the implementation of the plan. Having a well-designed plan ensures that in a stressful situation after an emergency, it is critical important factors will not be missed.

Documentation. The plan can be documented different ways. Most companies still use traditional text editors, others use commercial software. Whichever method is used, it is important to ensure that change management procedures are followed rigorously to keep the plan up to date with the actual current situation.

Education. Recovery Team training is aimed at ensuring that each employee knows their roles and responsibilities in case of emergency situations.

simulated disaster. Most companies test the plan at least once every six months. By simulating disasters, you can test the plan, find its weaknesses and work out the interaction of the participants. Finding deficiencies usually entails adjusting the plan. The plan should be regularly tested and adjusted. Few business continuity plans are progressing as originally envisaged. Since the plan needs to be amended regularly, the procedure for updating the plan should be as simple as possible.

When developing a business continuity plan, consider the following:

If no plan is currently in place, top management should be made aware of the potential hazards associated with not having a prepared and tested plan;

If there is a plan, it is necessary to ensure its regular testing - to carry out a cyclical replacement of specialists participating in the tests. It is desirable that the maximum number of employees take part in this process;

Management must make business continuity planning one of its goals;

When choosing alternative work spaces, care must be taken to ensure that they can be used when needed;

Don't take existing backup systems and procedures for granted: do a full review of the backup and make any necessary changes. Test recovery procedures;

When prioritizing applications, ask executives for their views;

Consider in the plan all the little things that could interfere with the process of restoring activities;

Once the plan is in place, develop a mechanism to ensure that it is updated regularly.

The plan should also contain procedures for performing the following functions:

Putting in place emergency procedures.

Notifying employees, suppliers and customers.

Formation of recovery group(s).

Disaster impact assessment.

Deciding on the implementation of the recovery plan.

Putting in place recovery procedures.

Moving to an alternative work space(s).

Restoring the functioning of critical applications.

Restoration of the main work area.

In addition, the plan should contain documents that can be used by personnel not familiar with the specific function to be restored. These documents must include the following information:

Telephone switching schemes;

Procedures for emergency power off;

Organizational structure of the Recovery Center;

Requirements for equipment and supplies of the Recovery Center;

Recovery Center configuration;

List of critical applications;

List of equipment to be restored;

Summary of risk assessment.

Wire complex analysis Let's present a description of the plan for ensuring business continuity in the organization. The plan includes the following main sections:

a) The main provisions of the plan.

b) Assessment of emergency situations:

Identification of vulnerabilities of the company;

Classification of possible hazardous events and assessment of the probability of their occurrence;

Emergency scenarios;

Potential sources of negative consequences of each emergency and assessment of the amount of damage;

A set of criteria based on which an emergency is declared.

c) Activities of the company in an emergency:

Initial emergency response (assessment of a dangerous event, declaration of an emergency, notification of the necessary circle of people, activation of an emergency plan);

Measures to ensure the continuity of the company's activities in an emergency and the restoration of its normal functioning.

d) Maintaining emergency preparedness:

Control of the correctness and adjustment of the content of the plan;

Drawing up a list of addresses and procedures for mailing the plan;

Development of a program to improve the skills and familiarize staff with the actions necessary to restore the company's activities after a disaster;

Prepare for hazardous events, ensure safety and prevent disasters;

Regularly conducting partial and comprehensive reviews (such as fire drills) of the company's readiness to act in an emergency and the ability to restore normal activities;

Regular creation backups data, documentation, forms of input and output documents and the main software, their storage in a safe place.

e) Information support:

Priority functions performed by the company;

Lists of internal and external resources -- technical means, software, communications, documents, office equipment and personnel;

Accounting information about the technical, software and other support necessary to restore the organization's activities in case of an emergency;

List of persons to be notified of the emergency with addresses and telephone numbers;

Auxiliary information - plans and diagrams, transportation routes, addresses, etc.;

Description of detailed step by step procedures ensuring the strict implementation of all the measures envisaged;

Functions and duties of employees in case of unforeseen circumstances;

The timing of the restoration of activities, depending on the type of emergency that has arisen;

Cost estimates, funding sources.

f) Technical support:

Creation and maintenance of a base of technical means that ensures the smooth operation of the company in an emergency;

Creation and maintenance in proper condition of a reserve production facility.

g) Organizational support, composition and functions of the following groups to ensure uninterrupted activities in the event of a disaster:

emergency assessment teams;

Crisis Management Groups;

Groups for work in an emergency;

recovery groups;

Groups for ensuring work in a backup production room;

Administrative Support Groups.

Thus, an organization's business continuity plan is a detailed list of activities to be completed before, during and after a disaster. This plan is documented and tested to make sure it works under changing conditions.

The plan serves as a guide to action during a crisis and ensures that no important aspect is overlooked. A professionally designed plan guides the actions of even inexperienced employees.

Having a detailed, regularly tested plan will help protect any organization from malpractice lawsuits. The very existence of the plan is proof that the company's management has not neglected to prepare for possible disasters.

The main benefits of developing a detailed business continuity plan are as follows:

Minimization of potential financial losses;

Reducing legal liability;

Reducing the time of disruption of normal operation;

Ensuring the stability of the organization;

Organized recovery activities;

Minimizing the amount of insurance premiums;

Reducing the burden on key employees;

The best safety of property;

Ensuring the safety of personnel and customers;

Compliance with laws and regulations.

Analysis of the activities of the enterprise "Bipek-Auto"

In the event of a fire or a fire, or if there are signs of a fire or a fire, the employee is obliged to: immediately report by phone 101 the following: the exact address (street, building or building number, floor) what is on (electrical installation ...

Information and documentation support for making strategic decisions in an organization (on the example of OAO Rodina)

The organization of documentary support for the adoption of strategic decisions of an enterprise is a set of measures aimed at creating and maintaining conditions ...

The role of the socio-economic structure in shaping the socio-psychological climate of the production team is very important. According to these most significant factors...

Planning of production and economic activities

In the conditions of the functioning of market relations, enterprises study the market situation, the possibilities of potential partners, price movements and, on their basis, organize the logistics of their own production ...

The use of outplacement when releasing personnel

Development of an anti-crisis strategy at the enterprise (based on the materials of JSC "GMS Pumps")

JSC HMS - Pumps is a large enterprise that has been operating for more than 60 years. The company is known on the market as a successful, efficient, high quality pump manufacturer...

Development of a business plan for implementing the strategy of a commercial organization

Each company, starting its activity, is obliged to clearly present the need for the future in financial, material, labor and intellectual resources, the sources of their receipt ...

Development of a business continuity and recovery plan

Almost all companies are now heavily dependent on computer technology or automated systems...

Development of methods for preventing conflicts in the organization. Chapter 1. Theoretical aspects conflict management in an organization 1.1 Analysis of the concept of conflict Among modern authors ...

Socio-psychological methods of conflict prevention in the staff of the SCS institution

Control methods conflict situations

IN tourism business conflicts are quite common and manifest themselves most clearly and vividly ...

Recently, the use of the labor of reserve teams has been growing in banks, as this makes it possible to organize continuous work without involving employees to work on weekends and without overtime main staff. How to organize the work of reserve teams? What rules are used to build the summarized accounting of working hours for them and for other categories of employees?

When is cumulative working hours applied?

Summary accounting is used for those positions that must ensure the smooth operation of the bank beyond the standard 8 hours a day. If the bank does not work from 9:00 to 17:00, then the duration of the working day of the bank itself must be provided by the staff who work at this time.

There are usually two options here:

The employee is set a long working day, but a rolling schedule is introduced for weekends and working days, for example, two in two for 12 hours a day;

The bank's extended working day is divided between two teams, for example: one team of employees works from 8:00 to 16:00, and the second - from 16:00 to 23:00.

In any case, if it is impossible for such employees to ensure a normal working week (40 hours), the employer, in accordance with Art. 104 Labor Code The Russian Federation (hereinafter referred to as the Labor Code of the Russian Federation) has the right to establish a summarized accounting of working hours with an accounting period of not more than a year.

How to determine the length of the accounting period?

If, as a result of a special assessment of working conditions, work was revealed in harmful conditions, then the duration of the accounting period for such employees cannot be more than 3 months. This factor must be taken into account. In addition, if the “harmfulness” determined based on the results of a special assessment has a high degree of 3 or 4 (class 3.3 or 3.4), then the normal working hours for such categories of employees is no more than 36 hours per week. The length of the working day for these categories (with the exception of certain cases) should not exceed 8 hours.

In practice, the vast majority of bank employees work in acceptable working conditions with class 2. Therefore, a 40-hour work week and a working day of more than 8 hours can be established for them.

The specifics of the summarized accounting of the working time of bank employees

The summarized accounting of working hours for bank employees is carried out in the same way as for other categories of employees:

The procedure for establishing the duration of the accounting period is determined in the rules of the internal work schedule according to Art. 104 of the Labor Code of the Russian Federation.
During the accounting period, the employer must plan the work so that the employee works out the normal working hours. Planning a schedule with overtime is prohibited by labor law.
If employees, along with the summarized accounting of working hours, also have a shift mode of work, then in accordance with Art. 103 of the Labor Code of the Russian Federation, it will be necessary to develop a shift schedule taking into account the opinion of the representative body and bring it to the attention of employees no later than a month in advance. Although amendments to Art. 103 of the Labor Code of the Russian Federation and the familiarization period for employees will most likely be shortened to 10 days.

What are the specifics in these matters characteristic of banks?

Firstly, banks rarely have primary trade union and other representative bodies, respectively, all documents that the Labor Code of the Russian Federation requires to be accepted in agreement with them or taking into account their opinion should contain an indication that at the time of approval of this document there are no such bodies in the bank.

Secondly, As a rule, the document flow in banks is carried out electronically, documents in writing are maintained only when absolutely necessary and to comply with legal requirements. Therefore, the same familiarization of the employee with the shift schedule occurs through the direction of the electronic form of the schedule or on an electronic resource. There is no violation here, since Art. 103 of the Labor Code of the Russian Federation does not establish the requirement to acquaint with the shift schedule “under signature”, therefore such familiarization has every right to exist. But taking into account the fact that the employer should be able to bring the employee to disciplinary responsibility, such a procedure for familiarizing with the work schedule should be legalized in internal regulatory documents, with which employees should be familiarized already with the affixing of a “live” signature.

Thirdly, the specificity of banks is to use the salary system of remuneration. With the summarized accounting of working hours, if the accounting period is more than one month, it is still recommended to apply hourly tariff rates or a piecework wage system, since the salary system often causes disputes between employees and the employer.

Fourth, since bank employees usually have a higher financial or legal education, conflicts related to wages are always more “subtle” here. It should be borne in mind that since in most cases the summarized accounting in the bank is set for employees who work according to a clear schedule: two in two, three in three, etc., it is recommended to set the duration of the accounting period to obtain an economic effect based on out of a couple of months. The optimal accounting period, of course, in the vast majority of cases is a year, a little less often - six months. If it is necessary to set an accounting period of a shorter duration, then you can take 4 or 2 months, but it is absolutely unprofitable in the case when employees work according to a clear schedule, the accounting period is one or three months.

Reserve brigades

The name "reserve brigade" is not something established by law, such a term has developed in practice. In many banks, the need to create such teams is due to the fact that within the same locality, the bank opens branches with an absolutely typical staff structure: a cashier, an operator, a customer service specialist, etc. And if an employee unexpectedly did not come to work in the department, then a certain function in this department “sags”.

You can quickly “close” this area by another employee in several ways:

Create universal workers inside the department who can “close” any area. But here the question arises: what to do if all the workers went to work or not one worker, but three did not go; how to organize the training of such universal employees, access to work with material values etc.?
IN urgently transfer (or move - depending on the terms of the employment contract) an employee of one department to another department.
Promptly attract an employee of the required specialization from the reserve brigade.

The composition of the reserve team is formed in such a way that, if necessary, it is possible to replace any employee of the department. Reserve brigades are created, as a rule, in certain locations, overseeing several departments. These employees not only “close” one-time absences from work, but are also able to go to work for a period of long-term absence of an employee in case of his illness or in case of his dismissal. The number of employees of the reserve team is determined mathematically, taking into account the tasks of the bank, absenteeism statistics and the number of supervised branches.

Optimal working hours for reserve team members

First- this is the total accounting of working hours maximum duration. That is, if there are no restrictions for employees established by law, it is recommended to choose an accounting period of one year.

Second: since the beginning and end of the working day for different employees in the department and in different departments are not always clearly defined, it is optimal to establish flexible working hours for such employees in accordance with Art. 102 of the Labor Code of the Russian Federation.

It is pointless to establish a shift work schedule for such employees, since it is simply impossible to familiarize them with the shift schedule a month before the start of the period, based on the goals and objectives of such a team.

When establishing a flexible working regime, the beginning and end of the working day will be determined by the employer, based on which department the employee is sent to and whom he replaces there.

These issues must be resolved by prescribing the mode of operation of an employee of the reserve brigade. The mode of operation is fixed in the internal labor regulations. If there is only one such employee in the company or an individual regime and schedule is agreed with each employee of the reserve team, then such a regime under Art. 57 of the Labor Code of the Russian Federation is prescribed in employment contract this employee. It is also necessary to prescribe that the employer notifies the employee of the reserve team about the beginning of the working day immediately before the employee needs to go to work, and the latter must start work as soon as possible.

The economic effect of the creation of reserve brigades

As a rule, the work of the workers of the reserve brigade is paid higher than the work of other workers. However, taking into account the fact that the involvement of key personnel to work outside the normal working hours must be paid at an increased rate, the formation of reserve teams always leads to a reduction in the wage fund.

The calculation of the economic effect can also be made for individual positions in the department, if the data on work in excess of the norm for them is different and the employees of the reserve brigade will “close” only one position, that is, they will not be generalists. The principle of forming a reserve brigade from generalists, when one such employee can "close" several positions of the department, is more economically beneficial. But in any case, it all depends on the specifics of a particular bank.

To date, providing Reserve copy engaged in the server, whether large or small enterprise. Therefore, you need to talk about the smooth operation of the server directly. What is required for the smooth operation of the server

In order for the server to work smoothly, you need not only to have powerful equipment, but also additional equipment, qualified personnel. They must provide optimal conditions for the server to work.

1 TO additional equipment can be attributed:

air conditioning of server rooms, that is, a cooling system, ventilation, etc., which do not allow overheating of equipment;

various sensors designed to control temperature regime in system;

automatic generators that turn on when the power is turned off;

independent lines designed to provide equipment with power;

watchdog timer that warns of a server hang.

2. Qualified specialists carry out backup, replacement, connection of the main elements without shutting down the equipment. Also, uninterrupted operation is ensured by the presence of large memory.

How servers are air conditioned

The server with auxiliary equipment is installed in separate room where there should be good air circulation. Air conditioners must be installed in the room, capable of maintaining optimum temperature and humidity. They also separately install a ventilation and cooling system on server cabinets. It is desirable that they be able to determine which area needs more cooling.

As can be seen, in order to ensure uninterrupted and reliable operation server needs a lot of effort and money

Information recovery

This section will describe in detail the procedures for recovering information:

Restoring the file system structure

In the case of formatting a logical disk or partition, the structure and attributes of the data are not violated, but the information about the location of the data on the given drive is changed or inventoryed (brought to its initial state).

With quick formatting, a small part of the file table is updated, some of the service records remain, you just need to interpret it and read the data in the right order.

Full formatting can update the entire file table, so restoring the structure of files and folders is not always possible. To recover data without information about the structure, you can use file recovery by signatures.

If the file system is corrupted due to a software or media failure, data recovery programs can recover some of the information, depending on the extent of the damage.

Recovering deleted file system data

When deleting data, in fact, the data physically remains on the drive, however, it is no longer displayed in the file system, and the place on the media where it is located is marked as free and ready for writing new information. IN this case file attributes are changed. In the case of writing to this partition or logical drive, partial or complete replacement of data marked as deleted may occur.

Such files can be easily read and restored with all attributes and location information by reading the service records of the file system. There are both programs for recovering deleted data only, and complex solutions where recovering deleted data is just one of the functions.

Recovery by signatures

In the event that file system reconstruction is not possible due to any reason, some files can still be restored using signature recovery. With this type of recovery, the drive is scanned sector-by-sector for known file signatures

The basic principle of signature search algorithms is the same as that of the very first antiviruses. Just as an antivirus scans a file looking for pieces of data that match known pieces of virus code, signature search algorithms used in data recovery programs read information from the disk surface in the hope of finding familiar pieces of data. The headers of many file types contain characteristic sequences of characters. For example, JPEG files contain the character sequence “JFIF”, ZIP archives start with the characters “PK”, and PDF documents start with the characters “%PDF-“.

Some files (for example, text and HTML files) do not have characteristic signatures, but can be determined indirectly, because contain only characters from the ASCII table.

Based on the scan results, most often, a list of files sorted by type is issued. File location information is not restored.

This type of recovery is good for recovering photos from memory cards, since the data on the card is of the same type and, in general, is written strictly sequentially, without fragmentation.

Mixed Recovery

Most programs allow you to apply several recovery methods at the same time in one scan. As a result, the maximum possible result when using this program.

Restoring from backups

The most reliable, simple and cheap way Restoring information - restoring information from previously made backups. To create backups, specialized software is used, which, among other things, can perform data recovery.

Consider the main types of media and their malfunctions.

Floppy disk drive (FDD)

The main fault is the so-called "demagnetization".

It occurs most often when passing magnetic detectors in shops, subways, airports. It is possible to recover data only from non-demagnetized areas of the drive. There are also malfunctions associated with physical damage to the media, such as scratches, severe contamination. Each case must be considered individually and only after that to predict the result of information recovery.

Hardware-software method

As mentioned above, in this method, great attention should be paid to the type of information storage device. Options and methods of recovery, let's start with a vivid example of a storage medium.

CD/DVD/BR drives

Optical drives may have different reasons inability to read data:

Mechanical

damage to the transparent layer

reflective layer damage

Chemical

transparent layer decomposition

decomposition of the recorded layer (for recordable discs)

reflective layer corrosion

Data Organization Disruption

due to hardware and software errors when writing data

due to incorrect data

The most common causes of unreadable discs are damage to the reflective and transparent layers, as well as decomposition of the recorded layer on recordable discs. In case of scratches on the surface of the disc, it is possible to apply polishing working surface, which will remove unwanted damage and improve data reading, however, if cracks form, it is dangerous to use this method, since during subsequent reading the disk may collapse in the drive under the action of centrifugal force. Damage to the foil coating of a disk (metal aging, scratches) complicates data recovery the most.

TO this type drives include USB Flash, SSD drives, SD, miniSD, microSD, xD, MS, M2, Compact Flash memory cards.

Most Common Technical Failures]

Logic Faults

These malfunctions occur in a variety of cases. One of the most common causes is incorrect removal of the device from the computer.

In the event of logical failures, data recovery is possible with the help of data recovery programs.

Mechanical damage

The drive has stopped working properly as a result of some physical impact (falling, moisture, bending, compression, etc.). The cause of the malfunction, most often, is the breakdown of the board or the destruction of contacts and components.

You can recover data if you fix the breakdown: replace the faulty component or restore the broken contact. It is also possible to read data directly from the memory chip using special equipment.

Data recovery is performed as in the previous case: by replacing components or by reading from memory chips directly.

Planning for network disaster recovery

One of the most complete and logical examples of such a document was developed by National Institute US standards (NIST) in 2001.

The system recovery plan establishes a list and sequence of procedures necessary to restore the normal functioning of the system after the onset of emergency circumstances that resulted in a denial of the availability of system resources. As a result of failure individual elements systems, physical destruction of premises, fire, flood, terrorist attacks, etc.

The main goal of the implementation of the Plan is to ensure the rapid and complete restoration of the stable functioning of the information system.

The goal is achieved by solving the following tasks:

determination of the course of action, procedures and resources necessary to restore the functioning of the system or ensure its stable functioning in the backup option for the placement of technical means and personnel;

determination of the staffing and main responsibilities of the personnel of the operational headquarters and emergency groups from among the bank employees for the implementation of the Recovery Plan measures, as well as the organization procedure effective interaction between and managing disaster teams throughout the duration of the Recovery Plan;

determination of the procedure for interaction and coordination of actions of the operational headquarters for the implementation of the Plan with other organizations and structures (firefighters, medical staff, police, rescuers, etc.), which may be involved in the elimination of the consequences of emergency events that caused a disruption in the normal functioning of the system.

For example, NIST specialists distribute all activities for the implementation of the Plan into three stages:

plan notification/activation stage. The main tasks to be solved at this stage are the timely identification of the onset of emergency conditions, the detection of damage to the system, the assessment of damage, the forecast of the possibility of restoring the functioning of the system and the decision on the need to activate the System Recovery Plan;

recovery stage. The main tasks are to restore the functioning of the system according to a temporary scheme (using reserve facilities and premises), to carry out a set of works to fully restore the system's operability in the amount normal conditions;

stage of system reconstruction/plan deactivation. The main tasks are the complete restoration of the normal operation of the system and the deactivation of the Recovery Plan, returning to normal operation.

According to a study by McKinseyQuarterly, the number of computer attacks on corporate IT systems has increased significantly over the past year in the United States. The McKinseyQuarterly study reports that the number of computer attacks (the actions of hackers, viruses, worms, unscrupulous workers, etc.) has increased by 150% compared to 2000, amounting to a total of 53,000 cases of breaches of company information security systems.

This growth occurred primarily due to the attitude to IT security as a purely technological area. This means that many organizational and strategic decisions in companies were simply neglected.

The feasibility of the Plan is based on two assumptions:

the normal functioning of the system is disrupted as a result of the occurrence of some extraordinary event or a chain of similar events. As a result, the system is not able to implement its functions to the extent required for quality customer service;

there is a prepared room that serves as a backup center for the placement of technical means of the system. The system personnel forms the necessary information and computing environment based on the technical means of the backup center to restore the functioning of the system according to the backup location option during the period of the Recovery Plan. In addition, the backup location option is used for the entire time required to restore the system to the previous (or new) location.

12/13/2016, Tue, 11:30, Moscow time

Modern world increasingly reliant on automated systems in various fields of human activity. There are a growing number of applications that have increased requirements for continuous operation. Specialists of NPP Rodnik present a boxed solution Stratus everRun Enterprise, which will help you quickly and easily ensure the smooth operation of a software solution or service.

As IT systems become more familiar, expectations for their reliability are rising - fewer users are willing to put up with downtime or failures of services that you expect to work continuously. For simple information or help systems, turning off for a short time is not too important. But for systems focused on work and user service, or enterprise services for employees, this is already less tolerable.

Next in terms of criticality are “service” systems, such as video surveillance and security systems, building management systems or production control and monitoring systems. If such subsystems go offline due to a failure of the control software, it can lead to costly, dangerous, and even life-threatening consequences. With a dysfunctional system, there is no way to know when an emergency is occurring or alert employees to a mandatory evacuation. Economic losses are also possible from the downtime of such information systems and sometimes legal obligations. In this case, it is better not to save on reliability and fault tolerance.

And finally, the main "production" processes. Depending on the subject area (banking systems, process control, trading systems and sales management, etc.), such solutions can vary in complexity and cost and are usually highly specialized. Ensuring their continuous operation - the most important task, and can be decided different ways, depending on the scale of the systems and their interconnectedness.

Available service

For the purpose of classification, computer systems are usually divided by the time of continuous work, as a percentage of the total duration of work. Often, the availability of a service or system is characterized by a parameter of 99-99.9% of the time, and the number "99.9" looks very reliable. But in practice, this means up to 90 hours of downtime during the year, or up to one and a half hours a week. To restore the operation of such a system, it is usually restarted, or restored from a backup.

The disadvantages of this method are obvious - this procedure takes time, which is not always acceptable. Modern services most often run on virtual machines (VMs) that need to be restarted in the event of a failure.

High availability systems are up and running 99.95-99.99% of the time. Here, cluster systems and technologies are used, in which one or another parallelization of services and systems is performed. “High availability,” however, can mean up to several hours of downtime over the course of a year. Depending on the solution, the redundant service or system may be in the so-called "cold" standby, in which case it takes some time to start it. It should also be noted the complexity of cluster technologies and increased requirements for the qualifications of IT staff. Clusters are complex and time consuming to deploy, require testing, and ongoing administrative oversight. Software usually you have to license for each of the servers in the cluster. As a result, in the case of growth of the cluster system total cost ownership is growing rapidly.

The main applications of Stratus everRun:

Video surveillance and access control systems

Power structures

Finance and banking services

Telecommunications

The medicine

Government sector

Production

transport and logistic

Continuous availability (English fault tolerance) - up to 99.999% of the time. This level of system reliability is achieved by specialized software and hardware solutions. Depending on the subject area (process control, banking systems), such complexes can be very different in complexity and cost.
But, as noted above, there are also less demanding applications that are expected to work continuously. These include building management systems, external control systems (video surveillance), access control systems, and the like. It is unlikely that users will be happy if the signal from all video cameras and sensors disappears, or if the ventilation system of the workshop or building stops work.

Turnkey solution

Dedicated IT systems tend to be complex, customizable, and highly skilled. But if they are successful, installation and maintenance become easier over time. There are ready-to-deploy complexes that do not require increased attention.

For continuous availability systems, one such solution is Stratus' everRun Enterprise software suite. It is specifically designed to ensure that data is retained even in the event of hardware or software failures.

Solution Benefits

When using everRun Enterprise, the application "lives" in two VMs on two physical servers. If one VM fails, the application continues to run on the other server without interruption or data loss. This is achieved by constantly reading the state of a running virtual machine and saving its settings. In the event of a failure, the latest state of the system is transferred to the parallel running VM, so that application execution is not interrupted. System servers can be geographically dispersed to improve reliability.

The Stratus everRun software is designed to ensure the continuity of service applications and the integrity of the data it collects. At the same time, the system, of course, has the functionality for quick disaster recovery in the event of a major failure. Stratus everRun solutions are based on the use of standard hardware, and protect any application for MS Windows Server and Linux from failures and failures in the server hardware.

According to the representative of the integrator company "Rodnik" Ivan Kirillov, "implementation of everRun Enterprise avoids building a complex network infrastructure, deploying and configuring additional management software, as well as the costs of personnel training that are required when operating traditional cluster systems."

How everRun Enterprise ensures continuous operation and data preservation of applications deployed on virtual machines

Thematic materials: