More than half of CIOs lack a formal disaster recovery plan

December 2003 Security Services & Risk Management, Surveillance, Access Control & Identity Management

54% of companies across Europe do not have a formal disaster recovery (DR) plan to cover all their existing IT infrastructure, and 18% do not have a formal DR plan in place at all. These are two of the findings to emerge from an independent Pan-European survey commissioned by Unisys.

The research highlights the risks and costs facing CIOs when considering the impact technology investment has on their business. Three real challenges for the CIO were highlighted: finance (cost), security and governance. However, the research also revealed that CIOs are leaving their companies dangerously exposed by not taking sufficient action to address these challenges. The survey found:

* That 67% of CIOs find it difficult to calculate the cost of losing data.

* That 77% of CIOs said they cannot quantify the financial impact of taking servers out or adding servers into their existing IT infrastructure. This means, for example, that they would be unable to calculate the benefits of consolidation and thus miss out on an opportunity to reduce costs.

* In terms of testing DR plans, nearly 30% of CIOs admit they do not test their DR plan even for mission-critical technology or are unaware if this plan is being tested.

"This begs the question as to what is 'mission-critical'?" asks Bernard Donnelly, technology consultancy services manager, Unisys Africa. "With the increase in corporate governance, directors need to respond to regulations, or they will find themselves liable. "The research suggests that too many CIOs are not checking what is going on in their organisations, and they are not examining their IT infrastructure closely enough. Most companies do not really analyse the value of their IT systems; too many servers, for example, are operating at under 30% capacity and companies need to use technology to its full potential."

Tony Lock, chief analyst, Bloor Research, comments, "It is apparent that many organisations have not yet managed to comprehend the value that their IT infrastructures hold in business terms. Very many organisations are totally dependent on their IT systems to operate a number of critical business services. It is essential that these systems have business continuity plans appropriate to the needs of the business.

"Disaster recovery is all about people, process and technology working together to ensure that service levels are maintained at the levels needed for the business to continue to operate. It is vital that companies find the time to understand what they need to protect and how this can be achieved. Experience has shown that standardisation can play a pivotal role in keeping IT and business operational in times of stress." CIOs can collaborate more effectively with their CFOs by supporting change in their culture, systems and processes to achieve their business objectives. Such change could be based on a process and system strategy that provides the following:

* Enterprise-wide global information.

* Consistent definitions.

* Realtime access.

* Adaptability to business structure changes.

* Cost-competitive infrastructure.

The following checklist includes some of the questions CIOs could address in order to prepare themselves for any process of change:

* What sort of assessment do you undertake?

* Do you have a business continuity plan?

* Is there a disaster recovery capability for your mission-critical systems?

* Is this disaster recovery capability tested on a regular basis?

* Do you have an overall availability target for your operation?

* As you have established your disaster recovery capability, have you used consolidation as a means to create a more reliable environment?

* How many servers are there in your company?

* What level of utilisation do they run at? (if 10% is the average, why not 90-100%?)

* How do you propose to increase this utilisation?

* What is the current number of users and the expected number of future users (do they have a plan to match the company growth strategy?)

* What is the upgrade path for security patches and service pack plan for the operating systems?

* The Unisys survey methodology: 200 telephone interviews were conducted with CIOs or their reports and CFOs or their reports in UK, France, Germany, Italy, Spain, Portugal and Netherlands. All individuals interviewed were from organisations employing 500+ people.

Bernard Donnelly
Bernard Donnelly

For more information contact Bernard Donnelly, Unisys Africa, 011 233 4000, [email protected]





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Continuum launches centralised access and identity management
News & Events Access Control & Identity Management Facilities & Building Management
Continuum Identity is a newly launched company in the identity management and access control sector, targeting the complexity of managing various Access and Identity Management (AIM) systems.

Read more...
ArxTech: Over 30 years of evolving security solutions for South Africa’s toughest challenges
Security Services & Risk Management Integrated Solutions
[Sponsored] For over 30 years, a Centurion-based company has helped shape how security technology is designed, deployed, and supported in South Africa. Originally known as CellSecure, it now operates as ArxTech.

Read more...
Don’t Miss the Exclusive Launch of the AirXpress 3 SCBA
Security Services & Risk Management
Be the first to experience the all-new AirXpress 3 Self-Contained Breathing Apparatus (SCBA), designed and manufactured by MSA, and brought to you by PSA Africa.

Read more...
Transform WhatsApp chaos into real-time security intelligence
Security Services & Risk Management
The HYDRA AI security intelligence software plugs into existing guard chat groups to automatically convert voice notes, photos, and texts into structured, real-time security data and insights.

Read more...
Human-centric control rooms
Iritron Integrated Solutions Surveillance Residential Estate (Industry)
Iritron and Oculus show that when it comes to control rooms, people, not just technology, are at the centre of the most significant performance differentiators today, not just how efficiently the technology works.

Read more...
SABRIC Annual Crime Statistics 2024
News & Events Security Services & Risk Management Residential Estate (Industry)
SABRIC has released its Annual Crime Statistics for 2024, reflecting a significant decline in financial crime losses, but also warning of the growing threat posed by artificial intelligence (AI) in fraud schemes.

Read more...
Health, safety, and environmental eLearning
Training & Education Security Services & Risk Management
SHEilds is a global leader in health, safety, and environmental eLearning, delivering internationally recognised qualifications such as NEBOSH, IOSH, IEMA, and ProQual NVQs.

Read more...
See crime stopped in seconds
Products & Solutions Security Services & Risk Management
Fog Bandit, a leader in security fog, is bringing its instant crime-stopping technology to Securex Cape Town 2025. Experience the innovation trusted worldwide to protect retailers, warehouses, and high-value sites.

Read more...
SA’s private security industry receives multi-million USD investment
News & Events Security Services & Risk Management
South Africa's private security sector has attracted significant international attention, with the world’s largest tactical flashlight manufacturer, Nextorch, announcing a major investment in its local operations, Nextorch Africa.

Read more...
Vetting people in security estates
iFacts Security Services & Risk Management Residential Estate (Industry)
In today’s security-conscious South Africa, estate management’s responsibility extends beyond gates and patrols; it involves ensuring that every resident, staff member, and service provider upholds the community’s safety standards.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.