Question

Discuss what you would recommend should be included in Regional Gardens' BCP as a result of their adoption of a Cloud and Microservices approach. You will need to consider, as a minimum, the issues of application resilience, backup and disaster recovery in a hybrid cloud environment

Answer 1

Business Contuinity Plan For Cloud - Business continuity describes a complete solution for backup and disaster recovery. A business continuity strategy will protect data on premises in physical and virtual servers and in the cloud. Whether data is on servers or in SaaS applications, it needs to be backed up. Business continuity goes a step further and offers you the ability to restore your data, which is termed disaster recovery. Whether a business is faced with a natural disaster, or a cyber-attack, strong business continuity practices will have you up and running in minutes, particularly business continuity solutions that leverage the hybrid cloud guaranteeing a quicker restore time.

HYBRID CLOUD BUSINESS CONTINUITY - The hybird cloud combines the advantages of a Private and Public Cloud. Organizations using a Hybrid Cloud use the Private portion of the cloud for mission-critical applications and for less critical applications they use the Public Cloud. The advatage of using such a combinations is the Private Cloud gives enhanced security whereas the Public Cloud lowers the price of the Business Continuity solution.

• With so many data breaches taking place, protecting data is the prime concern of IT Managers. For BC, the DR procedure should be based in the Private Cloud. Since a Private Cloud has only one client using this service, data is highly secure. The Private Cloud service provider also encrypts data and along with Passwords etc. a highly trustworlthy sercurity scenario can be created. Data can be transfered from behind the firewall of the client's server directly to the Private Cloud, which give another layer of added security.
• Since the Private Cloud is a sort of exclusive club, the price structure for such services will be on the higher side. This being the case, to reduce expenses, non-critical applications are generally not hosted in such a costly environment. Such non-critical application and data can be stored on the Public Cloud. While the Public Cloud may be less secure, but that does not mean that anyone can hack into the system easily. The Public Cloud too will have access controls and most cloud service prividers use a two stage access system for authentication of the user.

Disaster Recovery:

• Disaster Recovery and Business Continuity procedures being extremely critical in nature must be located in the Private Cloud. This will ensure that when a disaster strikes and production stops, the Recover Time Objective and Recovery Point Objective metrics can be met. It will be easy for IT Managers to restore production and reload the servers, install sercurity patches etc. by acessing in the DR/BC prcedures located in the Private Cloud. Even if there is a sudden spike in traffic during the recovery phase, the Private Cloud will be able to handle the data transfer volume.
• Since, the organization stores the non critical applications and data in the Public Cloud, even if there is a time lag during recovery, it will not have a major deleterious effect. Even the Public Cloud will have easy scalability and may spike in data transfer can be easily handled. In both instances, IT Managers should ensure sufficient bandwidth capacity plus some extra is available at all times.
• When replicating in a hybrid system, costs are lowered but not at the cost of security. The organization does not need to maintain an off-site production center, which may sit idle for even years without being put to use. When the DR/BC Plan is based on a Hybrid Cloud system, even if the physical infrastructure of the organization is destroyed, they can access the virtual desktop in the cloud and continue with production.

Thank you.