ICT continuity: are you spending enough or too much?

Few would question the necessity for ICT continuity solutions – but how many have interrogated how much they cost and how effective they are?

That’s a question posed by Jaun Harmse, senior business continuity management advisor at ContinuitySA, who asks how many organisations are aware of how accurately their ICT service continuity (traditionally known as IT disaster recovery) solutions match business requirements.

He also questions just how well such solutions will support business continuity when they are called upon; if they don’t, of course, any money that was spent on them is wasted.

“IT people sometimes don’t know what the actual business requirements for recovery are. They know they need to get the ICT services back up and running, but, owing to the traditional disconnect between IT and business, don’t have the necessary insight into the business requirements to ensure that the system recovery can support the people and process recovery requirements,” says Harmse.

The result is an absence of good corporate governance for what is a traditionally technical discipline and either a cost blowout through overinvestment on one end of the spectrum, or exposure of the business to unreasonable risk on the other.

He notes that ICT continuity is distinct from business continuity; the former is the technical component of the latter which also includes people and process.

“ICT continuity is typically seen as a technical function and not as part of the management of risk – but that has to change,” Harmse adds.

He says the implementation of an ICT Service Continuity Management (ICTSCM) framework, aligned with the ISO27031 standard for ICTSCM, supports a clearer understanding of business requirements for recovery. It also helps ensure that the ICT Service Continuity strategy is tailored to meet specific organisational needs.

The ISO27031 standard provides guidance to business continuity and IT disaster recovery professionals on how to plan for IT continuity and recovery as part of a more comprehensive business continuity management system. Importantly, it is now referenced by the more recent ISO22301 standard for business continuity.

“The aim is to bridge the gap between business requirements and actual capabilities and incorporate ICT requirements analysis with business analysis. Understanding the business requirement better and involving IT in the discussion leads to more relevant strategy development and a strategy which is fit for purpose,” Harmse adds.

He turns his attention to cost, noting that it is the business which holds the purse strings, while the IT department tends to require the contents of the purse to provide services including those for ICT recovery. “With the establishment of a fit for purpose strategy, access to the purse is eased: business has a better view of what it is paying for,” says Harmse.

In developing a business continuity management and ICTSCM strategy, he says cognisance of “the facts” is necessary in order to align cost with benefit.

Points to bear in mind are:
* Every organisation does not need a fully replicated data centre;
* Every organisation does not need work-area recovery for every single staff member;
* Modern technologies make it easier to design fit-for-purpose and cost-efficient solutions;
* Recovery strategies should take both the capital and operating expenses of proposed solutions into consideration; and
* Understanding requirements and risks delivers buying power.

If these facts are not understood, Harmse points out that there is little hope of achieving ICTSCM measures which are both cost effective and which also effectively support business continuity. “It is very important that you understand the variables and the risks and translate that for the IT department, or outsourcing service provider, to make sure that the resulting strategy is fit for purpose and to your requirements, not theirs.”

Failure to do this, says Harmse, means the investment in ICTSCM cannot be accurately matched to business needs, and cannot be expected to support business continuity effectively when it is needed most. “Achieving process and cost efficiencies for ICTSCM doesn’t lie in individual activities, but rather the implementation of integrated processes – and cost savings can be achieved as a direct result of good information and informed decisions,” he concludes.

Comment on This Article

Your email address will not be published. Required fields are marked *

Our People

Allen Smith, Executive Chairman

Allen Smith, Executive Chairman

Michael Davies, Chief Executive Officer

Maxine Arnold, Chief Financial Officer

Maxine Arnold, Chief Financial Officer

Bradley Janse van Rensburg

Bradley Janse van Rensburg, Solution Design Manager

Mark Beverley, General Manager: Service Delivery

Wayne Reed, General Manager: R&D

Cindy Bodenstein, Marketing Manager

Miles Murray, General Manager: Sales

Miles Murray, General Manager: Sales

Tracey Linnell, Business Continuity Management

Tracey Linnell, General Manager: Advisory Services

About Us

ContinuitySA is the African continent’s leading business continuity management company.

Our team of highly skilled and qualified industry experts  can help prepare for and deal with potential threats to the optimal functioning of any business, as a result of unforeseen or sudden disruptions due to human error or natural events.

ContinuitySA provides clients with total business continuity solutions and complete outsourcing services, through a comprehensive range of professional services backed by an unrivalled nation-wide infrastructure of facilities, including product offerings and resources.

Our services are focused on the provision of complete business continuity planning, among which include:

•             Risk management,

•             Business impact analysis,

•             Business continuity plans,

•             Crisis management planning,

•             Provision of IT and business recovery facilities including office, contact centre, treasury dealing rooms and back-office Wintel, midrange and mainframe recovery areas. All of these technologies are supported by skilled technical personnel who assist in successful Business Continuity Plan testing and have experience in recovering from actual disasters.

We operate the largest recovery facilities in Southern Africa, with over 25000 sq/m of facilities in Gauteng (Midrand and Randburg), a smaller site in Cape Town of 3000sq/m as well as a 1500sq/m site in Gaborone, Botswana.

Contact Us

Gauteng

Unit5, Growthpoint Business Park

Corner Old Pretoria and Tonetti Road

Midrand

1685

PO Box 2638

Midrand

1685

Tel: + 27 11 554 8000

Fax: + 27 11 554 8150

 

Sales and Marketing:             

Office: (011) 554 8000

Fax: (011) 554 8050

Email: info@continuitysa.co.za

 

Western Cape

15 Maritz Street

Belville

Cape Town

7530

PO Box 897

Sanlamhof

7530

Tel: +27 21 917 5400

Fax: + 27 21 945 2762

 

ContinuitySA Botswana

Street  No 268

Private Bag 00346

Phakalane , Gaborone

Botswana

Tel: +267 360 6600

Fax: +267 318 1930

 

ContinuitySA Mozambique

Rua De Souza 18

Matola

Mozambique

Tel: +258 2172 6000

 

ContinuitySA Randburg

308 Kent Avenue

Randburg, Gauteng

Tel: 011 438 6889

 

ContinuitySA Somerset

Office: (011) 438 6889

Continuity Grove Offices

Block C, Olive Grove

Kynoch Road

Somerset West 7130

www.continuitysa.com or www.continuitysa.co.za

Tel: 021 917 5400