Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Management
[Top] [All Lists]

Re: Proximity of DR Sites & U.S. City Hazards

Subject: Re: Proximity of DR Sites & U.S. City Hazards
Date: Tue, 07 Mar 2006 10:36:22 -0600
Jonathan.Bloomquist@chase.com wrote:
I'm going to have to disagree with that distance estimate. We recovered
from Hurricane Wilma just under 200 miles from the primary facility to a
hot site in Orlando. The hurricane damage affected mostly south Florida and
in Orlando there was gasoline, street power, and (sparse) lodging to
accomodate the business. Unfortunately, lots of other people did the same
thing, so things like gas cans and generators were still hard to find.

I'm glad to hear your experience with Wilma was not a devastating blow. But, that particular storm was not on the upper scale of dangerous.

My look at the NOAA graphs show peak winds of 115 mph,
with a relatively fast moving storm that crossed
South Florida on a northeast track, minimizing its
time over land.

See:  http://www.nhc.noaa.gov/pdf/TCR-AL242005_Wilma.pdf

A category 4 or 5, slow moving hurricane coming straight
up the Florida penisula would probably put almost everyone
in the state offline for at least 3 to 4 days, many much
longer.

Take for example my evacuation from Rita.  Almost the
entire coast of Texas evacuated.  Going from the Galveston
area to Corpus Christi, I actually had problems finding a
motel room there due to the lack of employees. Many gas
stations, stores, and other establishments were closed
for 2 to 3 days, even though the hurricane actually went
through the Beaumont to Lake Charles area.

As a side note, for Texas DR planners, our state is at
the beginning of a 10 year high hurricane activity
cycle.  See the last paragraph with the title:
"Long term trends/hurricane cycles", in this URL:

http://www.srh.noaa.gov/lch/research/txhuclimo2.php

Lots of things to consider, huh?

My personal strategy:

1.  mirror data at a large, well run data center
    like Rackspace

2.  do as much telecommuting as possible, without
    actually keeping sensitive data on the PC's

3.  put together mobile resources, based on the
    reasonable minimum it takes to stay in business

4.  have a plan, brainstorm with experienced folks
    who have been through disasters

5.  once you have a plan that takes all the factors
    into consideration, get it reviewed by others

6.  then, (here's the scary part):  at least once a
    year, pull the plug and see if the plan works

But, back to the original question of "how far is
far enough?".  If the last power blackout in the
East had happened during a major winter storm, how
far away would you have to be to have electricity?

Or, how about Canada in 1998?

http://www.msc-smc.ec.gc.ca/media/icestorm98/icestorm98_the_worst_e.cfm

Lastly, DR planning is always, at best, a gamble.
Most budgets will allow you to plan only for the
"most likely".  But, with some ingenuity and use
of low cost technology, even a "worst case" event
can be survived.

Mark Stingley

--
Excellence in InfoSec and Linux
http://www.altsec.info

<Prev in Thread] Current Thread [Next in Thread>