More than half of CIOs lack a formal disaster recovery plan

December 2003 Security Services & Risk Management, Surveillance, Access Control & Identity Management

54% of companies across Europe do not have a formal disaster recovery (DR) plan to cover all their existing IT infrastructure, and 18% do not have a formal DR plan in place at all. These are two of the findings to emerge from an independent Pan-European survey commissioned by Unisys.

The research highlights the risks and costs facing CIOs when considering the impact technology investment has on their business. Three real challenges for the CIO were highlighted: finance (cost), security and governance. However, the research also revealed that CIOs are leaving their companies dangerously exposed by not taking sufficient action to address these challenges. The survey found:

* That 67% of CIOs find it difficult to calculate the cost of losing data.

* That 77% of CIOs said they cannot quantify the financial impact of taking servers out or adding servers into their existing IT infrastructure. This means, for example, that they would be unable to calculate the benefits of consolidation and thus miss out on an opportunity to reduce costs.

* In terms of testing DR plans, nearly 30% of CIOs admit they do not test their DR plan even for mission-critical technology or are unaware if this plan is being tested.

"This begs the question as to what is 'mission-critical'?" asks Bernard Donnelly, technology consultancy services manager, Unisys Africa. "With the increase in corporate governance, directors need to respond to regulations, or they will find themselves liable. "The research suggests that too many CIOs are not checking what is going on in their organisations, and they are not examining their IT infrastructure closely enough. Most companies do not really analyse the value of their IT systems; too many servers, for example, are operating at under 30% capacity and companies need to use technology to its full potential."

Tony Lock, chief analyst, Bloor Research, comments, "It is apparent that many organisations have not yet managed to comprehend the value that their IT infrastructures hold in business terms. Very many organisations are totally dependent on their IT systems to operate a number of critical business services. It is essential that these systems have business continuity plans appropriate to the needs of the business.

"Disaster recovery is all about people, process and technology working together to ensure that service levels are maintained at the levels needed for the business to continue to operate. It is vital that companies find the time to understand what they need to protect and how this can be achieved. Experience has shown that standardisation can play a pivotal role in keeping IT and business operational in times of stress." CIOs can collaborate more effectively with their CFOs by supporting change in their culture, systems and processes to achieve their business objectives. Such change could be based on a process and system strategy that provides the following:

* Enterprise-wide global information.

* Consistent definitions.

* Realtime access.

* Adaptability to business structure changes.

* Cost-competitive infrastructure.

The following checklist includes some of the questions CIOs could address in order to prepare themselves for any process of change:

* What sort of assessment do you undertake?

* Do you have a business continuity plan?

* Is there a disaster recovery capability for your mission-critical systems?

* Is this disaster recovery capability tested on a regular basis?

* Do you have an overall availability target for your operation?

* As you have established your disaster recovery capability, have you used consolidation as a means to create a more reliable environment?

* How many servers are there in your company?

* What level of utilisation do they run at? (if 10% is the average, why not 90-100%?)

* How do you propose to increase this utilisation?

* What is the current number of users and the expected number of future users (do they have a plan to match the company growth strategy?)

* What is the upgrade path for security patches and service pack plan for the operating systems?

* The Unisys survey methodology: 200 telephone interviews were conducted with CIOs or their reports and CFOs or their reports in UK, France, Germany, Italy, Spain, Portugal and Netherlands. All individuals interviewed were from organisations employing 500+ people.

Bernard Donnelly
Bernard Donnelly

For more information contact Bernard Donnelly, Unisys Africa, 011 233 4000, [email protected]





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Risk management and compliance enforcement
Security Services & Risk Management
Having a risk management and compliance programme (RMCP) is not just a procedural formality; it is a legal requirement under Section 42 of the Financial Intelligence Centre Act (FICA).

Read more...
Gallagher Security releases OneLink
Gallagher Animal Management Products & Solutions Access Control & Identity Management
Gallagher Security has announced OneLink, a cloud-based solution that makes it faster, easier and more cost-effective to deploy security anywhere in the world, transforming how security can be delivered to remote sites and distributed infrastructure.

Read more...
The dangers of poor-quality solar cables
Security Services & Risk Management Smart Home Automation
Reports indicate that one in six fires attended by South African firefighters is linked to substandard solar installations, often due to faulty wiring or incompatible components.

Read more...
Growing risks for employers
Security Services & Risk Management
With South Africa’s unemployment rate exceeding 32% and expected to rise beyond 33% this year, desperation is fuelling deception in the job market. Trust is no longer a given, it is a gamble.

Read more...
Chubbsafes celebrates 190 years
Gunnebo Safe Storage Africa News & Events Security Services & Risk Management
Chubbsafes marks its 190th anniversary in 2025 and as a highlight of the anniversary celebrations it is launching the Chubbsafes 1835, a limited edition 190th-anniversary collector’s safe.

Read more...
Next generation of AI-powered video telematics
IoT & Automation Surveillance Transport (Industry)
Webfleet, Bridgestone’s fleet management solution in South Africa, has launched Webfleet Video 2.0, an AI-powered solution designed to enhance fleet safety, security, compliance with local regulations and operational efficiency through real-time video insights.

Read more...
Suprema unveils BioStar Air
Suprema neaMetrics News & Events Access Control & Identity Management Infrastructure
Suprema launches BioStar Air, the first cloud-based access control platform designed to natively support biometric authentication and feature true zero-on-premise architecture. BioStar Air simplifies deployment and scales effortlessly to secure SMBs, multi-branch companies, and mixed-use buildings.

Read more...
New law enforcement request portal
News & Events Security Services & Risk Management
inDrive launches law enforcement request portal in South Africa to support safety investigations. New portal allows authorised South African law enforcement officials to securely request user data related to safety incidents.

Read more...
Continuous AML risk monitoring
Access Control & Identity Management Security Services & Risk Management Financial (Industry)
AU10TIX, launched continuous risk monitoring as part of its advanced anti-money laundering (AML) solution, empowering businesses to detect behavioural anomalies and emerging threats as they arise.

Read more...
Key design considerations for a control room
Leaderware Editor's Choice Surveillance Training & Education
If you are designing or upgrading a control room, or even reviewing or auditing an existing control room, there are a number of design factors that one would need to consider.

Read more...