Business continuity is both helped and challenged by today’s top tech megatrends – social, mobile, virtualisation and cloud

In IT, failure is not an option. Not surprisingly, organisations have made it a high priority to develop and implement reliable business continuity plans to ensure that IT services are always available to internal users and outside customers, says Bob Violino on CSO Online.

But recent technology developments and trends, most notably server and desktop virtualisation, cloud computing, the emergence of mobile devices in the workforce and social networks, are having an impact on how enterprises handle IT business continuity planning and testing. Much of the impact is for the better, experts say, but these trends can also create new challenges for IT, information security and risk management executives.


Virtualisation is making business continuity planning easier for IT executives and their organisations, if for no other reason than it’s helping to reduce the number of IT assets, says George Muller, vice president, sales planning, supply chain & IT at Imperial Sugar.

“For those of us who have been in the IT world for a few years, we’ve seen the transition from the old large mainframes to client server to web-based applications to cloud based computing,” Muller says. “During that time the proliferation of PCs and servers has been wild.”

With so many devices to maintain and keep running, particularly physical servers in the data centre, ensuring systems uptime had become a much greater challenge, Muller says. “With virtualisation, we’ve now been able to reduce that footprint [of servers], which means when we are planning for business continuity now we’ve got fewer devices to worry about.”

Virtualisation has actually had a bigger impact on disaster recovery than on business continuity, says John Morency, research vice president at research firm Gartner, although one area where there’s been an effect on continuity is work area recovery. Many companies have relied on providers of work area recovery sites for business continuity, which can cost from $15 to $25 per seat, Morency says.

“But what more organisations are doing now is having people work at home or at Starbucks or the library or wherever,” he says. “The use of Citrix, DVI and other desktop virtualisation technologies, in conjunction with secure tunnelling, is enabling organisations to implement broader and more distributed work area recovery.”

Some businesses and functions, such a branch banks and customer service call centres, continue to use work area recovery services, Morency says. But a growing number of Gartner clients are leveraging virtualisation to enable people to work offsite when needed, as an alternative to work area recovery.

Rachel Dines, senior analyst, Infrastructure & Operations, at Forrester Research, says desktop, or client, virtualisation is having a bigger impact on business continuity than server virtualisation. “Client virtualisation is making workforce recovery possible for many companies that cannot rely on employees working from home with laptops,” she says.

For example, at companies with highly sensitive information—such as financial services and insurance firms or government agencies—where employees are not issued laptops to prevent data leaks, client virtualisation enables the rapid deployment of client images to disparate hardware at workforce recovery sites, Dines says.

In addition, organisations can deploy client virtual machines over the internet and allow employees to access them via personal computers at home. “Either way, users are able to use the same environment that they are accustomed to on a daily basis, which means they will be more productive during the outage,” Dines says.

Cloud computing

Many of Gartner’s clients increasingly are using software-as-a-service (SaaS) to support business processes, Morency says.

“With the use of SaaS for client-facing applications and even internal customer support applications there’s a much improved means of continued availability, even in the presence of minor or major disruptions,” Morency says. “You have a set of applications delivered from the cloud.”

But this also imposes additional responsibilities on IT as far as being able to broker those services or provide additional problem management triage when necessary, Morency adds.

Because the cloud environment is maintained by service providers and software vendors, the onus falls on them to ensure continuity, and that can be a benefit as well as a risk, Muller says. “When I have a third party hosting the environment for me I look to them as part of the service-level agreement to have the resources—the people and hardware and infrastructure in place—so that they can guarantee me if the hardware has a problem at one location they’ve got another location that will bring up my apps in a manner that is seamless to our internal users,” Muller says. “That’s sort of their problem, as long as I’ve got a strong service-level agreement in place with them.”

On the other hand, even with a service-level agreement holding the service provider responsible there are no guarantees that service will not at some point be interrupted, Muller says.

Not everyone sees cloud computing as influencing business continuity. “As of today, I don’t see a huge impact,” Dines says. “However, I do expect this to become a significant complicating factor in the future. As more organisations outsource more services to the cloud, it will become the job of the business continuity manager to audit the recovery plans of many different suppliers.”

In addition, Dines says, during a failure or testing, recovery will need to be co-ordinated across many different sites run by different vendors. “Longer-term, cloud will make business continuity much more complicated,” she says.

Mobile devices in the workforce

The proliferation of mobile devices in the workforce is a benefit for business continuity strategies because it gives more flexibility for workforce recovery options, Dines says.

“As compared to the days when employees only had desktops and laptops, the ability to remain productive without access to a computer via tablets and smartphones is a significant advantage,” she says. “Additionally, it means that employees should be easier to communicate with during a disaster.”

Business continuity planning software vendors are putting more emphasis on ensuring that the software and information needed for business continuity can be accessible via mobile devices, Morency says. This includes information such as the current status of recovery, the locations to which employees should be going, what applications and services they can access and where they connect to get the latest emergency updates.

“This is not only for telecommuters but for the workforce in general and the mobile sales folks who need ways to access the information that is most relevant to them, and be able to access this through the device of their choice,” Morency says.

Enterprises “cannot depend on corporate headquarters or the data centre always being available following a disruptive event,” Morency says. “They have to ensure that critical plan content is always available including to mobile users regardless of what happened.”

Social networks

A Forrester report published in July 2011, entitled It’s Time to Include Social Technology in Your Crisis Communication Strategy, notes that while many risk professionals subscribe to automated communication services for reliable mass notification, “the widespread adoption of mobile devices and easy internet access support the case for using social technologies like Twitter, Facebook, and Skype as critical components of your response plan.”

As companies look for rapid, effective communication approaches with key stakeholders in crisis communications, they should strongly consider leveraging social technologies, the report says.

Another report, The Do’s and Don’ts of Using Social Media in Business Continuity Management, released by Gartner in January 2012, notes that social media “holds the promise of transforming enterprise business continuity management, especially crisis/incident management and communications practices.”

Social media is used by more than 80% of the world’s population, Gartner says, and enterprises can’t afford to ignore it as a crisis communications tool. But effective use of a new communications channel requires planning and practice, and attempting to leverage social media for the first time during a crisis can cause more harm than good, the firm says.

Among the key recommended steps are to determine which social platforms are already used by employees, customers and other stakeholders and use those platforms in crisis/incident management efforts; and use social media not only to communicate during a disaster, but to gather information and gain the support of outside resources that can help ensure ongoing business resilience. Business continuity management professionals should immediately begin assessing social media’s opportunities—and risks, the Gartner reports says.

“Social networks are both a blessing and a curse” for business continuity, Dines says. “They have the benefit of being an additional communication channel to get in touch with employees during a business disruption. However, they can be a headache for crisis communications and PR as they try to control potential damages to reputation and the propagation of rumours.”

To discuss this and other articles please visit the Mission Critical Systems Forum group on LinkedIn.

Comments are closed.