How to Adjust Disaster Recovery Plans for the Cloud

9 months ago 186

The total amount of data created, captured, copied, and consumed worldwide is forecast to increase rapidly. It stood at 149 zettabytes in 2024, and according to Statista, global data creation will grow to more than 394 zettabytes by 2028.

Many companies use cloud services, and many of those will be storing data in the cloud. Even for organizations with disaster recovery plans, DR is typically focused on preserving internal assets and systems.

Protecting internal IT is critical, but what about the IT that companies have in the cloud?

SEE: What Is Multicloud Architecture? (TechRepublic)

How to update your DR plans for cloud-based IT

Review your DR plans

Is your DR plan updated? Do you regularly test the plan to make sure it works? Does your DR plan cover all of your IT assets that are cloud-based? What about your internal systems? Are these properly covered in your plan? These are just a few of the questions organizations should ask themselves — ones that are likely to lead to even more.

What you want to end up with is a gap analysis that informs you where the holes in your DR plan are and what you need to do in order to address them. In most cases, organizations will see that they haven’t kept up with updates to their DR plans that account for all the IT assets they have in the cloud.

Assess your risks

Next, review your IT infrastructure. What are the types of business interruptions that the organization is most likely to face? Is your company in an area where an earthquake could threaten a local data center? Do you have security risks that your own systems or your vendors’ systems present?

When you identify your key vulnerabilities and develop approaches that mitigate them, you strengthen your DR capabilities at their weakest points. Some of these points will be in the cloud.

Meet with your cloud providers

Few cloud providers will assume liability if something goes wrong in the cloud. What most providers agree to do is to make a “best effort” for recoveries. Nevertheless, there are several steps you can take to ensure you have a provider that is well positioned for a DR if one is needed.

Cloud providers with robust DR capabilities have data centers in multiple regions of the country and/or in the world. In this way, if there is an earthquake in the west of your country that impacts a cloud data center, and your data and systems are replicated at another data center in the east, you can cut over to the eastern data center and keep running.

The vendor must also have data communications between data centers that are robust enough to make the cutover — and it has to have personnel at each data center who are capable of supporting your systems.

The best way to check on these capabilities is during your negotiations with the provider before you sign a contract. Once you have confirmed the vendor has the DR capability to support your systems, you can create SLAs as an addendum to your contract that state what you expect in terms of DR time.

You should also negotiate with your vendor for annual reviews and updates of your cloud DR plans. Also, negotiate for an annual test of DR and failover with the vendor to ensure your cloud DR plan actually works.

Update and test your plans on a regular basis

DR plan reviews and testing for cloud-based applications and data should ideally occur on an annual basis. Realistically, this might not always be practical. As an alternative, some companies opt to test select portions of their plans on a quarterly basis, since commandeering the resources and personnel for a full annual test of every system and data repository might be difficult.

In this way, you might not be able to stress test every system for DR in the cloud each year, but you will be able to gauge the DR readiness of your own IT internally and in the cloud.

SEE: A Brief History of Cloud Computing (TechRepublic)