Is your business continuity and disaster recovery up to scratch?

1 August 2019 Security Services & Risk Management, Infrastructure

Business Continuity (BC) and Disaster Recovery (DR) have become imperative to ensure organisations can handle the many different elements that may affect their data and thus their ability to operate. However, while the terms are often used interchangeably they are not in fact the same thing. A DR plan is the domain of the IT department and forms part of the overall BC strategy, which needs to be championed by the business as a whole. There are many different elements that make up a DR and BC plan, which organisations need to ensure they have in place for adequate protection.

The first step is to understand and quantify requirements by prioritising business critical systems and identifying the relevant data locations, according to risk, dependencies and core value to business. Once this has been assessed, only then can the organisation understand whether the systems and data need to form part of the BC or DR plan. It is also important to consider the impact of a mobile workforce on the type and location of data that needs to be included in any plan or strategy.

Another element that needs to be considered, especially with South Africa’s power situation in a state of flux, is an alternate power source for mission critical systems. While these can be costly to obtain and maintain, should the power situation worsen they will be invaluable. In order to optimise the investment, the power supply needs to be driven by the extent of the business requirement and dependence on systems and data accessibility.

DR plans can turn out to be less than effective if they are not implemented correctly, or for that matter if they are not tested on a regular basis. Data management specialists will be able to help an organisation to evaluate its data so that only relevant data is backed up and protected, saving the business in storage and recovery costs. However, testing is the most important step in ensuring that there are no holes or problems in the BC and DR plan. Businesses need to ensure data recoverability and this process must be tested frequently – only doing successful backups means nothing if the data cannot be recovered and restored. Most organisations asses their backup plan annually, but this is not often enough, especially with businesses that are rapidly evolving and the exponential growth of business data and data reliance.

While technology is an important component of DR, it is also vital to take the bigger picture into account. Both DR and BC also involve the management of people and processes that will affect the technology. This means that business and IT need to work together to ensure that BC and DR are effective and up to date to meet the needs of the organisation.


Hemant Harie

Establishing proper reporting procedures is critical. In the event of a disaster, the last thing an organisation should be doing is trying to remember what needs to happen next in the BC or DR strategy or for that matter, who is accountable for executing which aspect of the strategy and for which business unit. Business and IT custodians also need to ensure access to the relevant resources is maintained. This must include regular reporting on any changes to requirements, which may be impacted during a disaster.

It is also key that businesses engage with the right service provider to ensure a proper analysis of their backup requirements and testing. Although conducting tests internally may seem more efficient, they are not always accurate and can be skewed. Organisations need to have peace of mind that their data is accessible, protected and available at all time, so that they can focus on maintaining business functionality when any sort of disaster impacts their operations.

For more information, contact Gabsten Technologies, +27 87 654 1615, [email protected]




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Visualise and mitigate cyber risks
Security Services & Risk Management
SecurityHQ announced its risk and incident management capabilities for the SHQ response platform. The SHQ Response Platform acts as the emergency room, and the risk centre provides the wellness hub for all cyber security monitoring and actions.

Read more...
Eighty percent of fraud fighters expect to deploy GenAI by 2025
Security Services & Risk Management
A global survey of anti-fraud pros by the ACFE and SAS reveals incredible GenAI enthusiasm, according to the latest anti-fraud tech study by the Association of Certified Fraud Examiners (ACFE) and SAS, but past benchmarking studies suggest a more challenging reality.

Read more...
Deception technology crucial to unmasking data theft
Information Security Security Services & Risk Management
The ‘silent theft’ of data is an increasingly prevalent cyber threat to businesses, driving the ongoing leakage of personal information in the public domain through undetected attacks that cannot even be policed by data privacy legislation.

Read more...
Data security and privacy in global mobility
Security Services & Risk Management Information Security
Data security and privacy in today’s interconnected world is of paramount importance. In the realm of global mobility, where individuals and organisations traverse borders for various reasons, safeguarding sensitive information becomes an even more critical imperative.

Read more...
Proactive strategies against payment fraud
Financial (Industry) Security Services & Risk Management
Amid a spate of high-profile payment fraud cases in South Africa, the need for robust fraud payment prevention measures has never been more apparent, says Ryan Mer, CEO of eftsure Africa.

Read more...
How to prevent and survive fires
Fire & Safety Security Services & Risk Management
Since its launch in August 2023, Fidelity SecureFire, a division of the Fidelity Services Group, has been making significant strides in revolutionising fire response services in South Africa.

Read more...
A long career in mining security
Technews Publishing Editor's Choice Security Services & Risk Management Mining (Industry)
Nash Lutchman recently retired from a security and law enforcement career, initially as a police officer, and for the past 16 years as a leader of risk and security operations in the mining industry.

Read more...
Risk management: There's an app for that
Editor's Choice News & Events Security Services & Risk Management
Zulu Consulting has streamlined the corporate risk management process with the launch of Risk-IO, a web-based app designed to consolidate and guide risk managers through the process, monitoring progress as one proceeds.

Read more...
Integrated information platform for risk management
Editor's Choice News & Events Security Services & Risk Management
Online Intelligence recently launched version 7 of its CiiMS risk and security platform. Speaking to SMART Security Solutions after the launch event, the company’s Arnold van den Bout described the enhancements in version 7.

Read more...
Global Identity Fraud Report revealing eight-month ‘mega-attack’
Editor's Choice Security Services & Risk Management
AU10TIX recently released its Q4 Global Identity Fraud Report, with the research identifying two never-before-seen attack patterns, with the worst case involving 22 000+ AI-generated variations of a single U.S. passport.

Read more...