The increasing number of outages hampering companies that provide cloud-based services highlights the need for re-examining cloud infrastructures with an eye toward disaster recovery, says Kelly Baig, director of product marketing of recovery services for SunGuard Availability Services, Wayne, PA.
Cloud platforms and services are evolving quickly and leveraging more virtualization, running at a lower cost and reaching more parts of the organization. However, just because some or all parts of a business operate in the cloud—and off the firm’s premises and equipment—doesn’t mean that disaster recovery isn’t a prime consideration for a data center manager.
Cloud contracts run the gamut from the provider supplying capacity to supplying hosting and fully managing all services. So the data center manager who wants to know exactly how his or her firm is protected in the event of a disaster should carefully review the contract, paying careful attention to the actual provisions of the contract and the company’s own needs.
“You need to know who is responsible for recovery, availability, operating and securing the services in the cloud,” Baig says. Some contracts say little or nothing about back-ups, data redundancy and availability in the event of a wide area outage.
“Make sure you ask who is responsible,” she adds. “A common misconception is that all cloud platforms are highly available and geographically diverse. That’s why it’s important to have a contractual confirmation.” Baig recommends that companies prioritize their applications, determining which ones they need to have available 24×7, those that can be down for an extended period, and those in between.
Baig recommends that companies spend significant time designing (or working with a provider to design) architecture that is redundant throughout and looking
at the server level, network and bandwidth, data center, and storage. Redundancy throughout reduces risk, although it does come at a higher cost than less available services.
Similarly, managers need to prioritize data based on security of information. Even if the contract stipulates that the cloud provider is responsible for security, in industries like financial services and health care, regulatory authorities will still reach back to the data “owner” in the event of a breach. Baig says customers need to know the segmentation behind a shared, multi-tenant environment to ensure there is no customer overlap, meaning examining the service provider’s cloud infrastructure: network, virtualization and storage platforms. She recommends looking at the existence of and the management’s responsibility for security protocols.
For a more detailed article on this subject, “Offloading Data to the Cloud Remains Your Responsibility,” read the November/December issue of Data Center Management.






