Learning Outcomes:
• explain why data is archived;
• explain the need for backup and recovery;
• evaluate methods of backup: full backup, differential backup and incremental backup;
• explain the purpose of a disaster recovery plan;
• describe the contents of a typical disaster recovery plan;
An archive is the storage of information for a long period of time. Archived data consists of information that is still important to the organisation but it may not be of immediate use or it may be important for future reference. It may also consist of data which must be retained for a period of time in order to comply with legislation or for auditing purposes. Data stored in archive will most likely be compressed so as to take up less space. It may also be stored on a cheaper storage medium such as optical discs. Data stored in archive must still be accessible to the end user if the need so arises and as such it may be indexed to facilitate easy location and retrieval of desired files or data items
The backup process is the process of making copies of software or data in case the originals are lost or damaged. Having appropriate backup means that if a system failure occurs then the system or data can be rebuilt with accuracy. Following a system failure or data corruption the backup will allow the corrupt or lost data to be replaced using copies from the backup process.
It is expected that backups should be made on a regular basis so that any updates or changes made since the last backup can also be accounted for. variety of approaches to backup exists; these are outlined below. Purpose of a disaster recovery plan A disaster recovery plan is a document which details the procedures associated with the recovery of and protection of an IT system in the event of any kind of disaster.
A good disaster recovery plan will incorporate a set of procedures to support the recovery of or continuation of vital technology infrastructure following natural, environmental or man-made disasters. A well designed disaster recovery plan will take into consideration the processing and operational needs of the organisation in addition to considering the potential problems their IT systems might be exposed to.
Full backup –copies all files to provide a complete picture of the data at a given moment in time
• Everything is backed up at once
• Files can be restored quickly and easily as complete files copied from backup
• Most files do not change so may lead to redundancy in backups
• Takes longer to carry out as everything is being backed up
• Concerns over security – everything stored in one place
Differential backup – copies only those data files that have been changed since the last full backup
• Faster than incremental restore as only uses the last full backup and last differential backup
• Only copies files that have been updated so backup is faster than full backup
• Takes up less storage space than a full backup
• Requires more storage space than an incremental backup
• Longer time needed to restore files than with incremental backup as all changes since the last full backup will be copied
Incremental backup – copies only those files that have been changed since the last backup of any type
• Faster backup time as only amended files need to be copied
• Less storage medium required to store incremental file as only copy files where changes have occurred
• Recovery process can take longer as all previous incremental backups are required in the process
• Problems may occur if any incremental backups have corrupted, the entire file will be unrecoverable
A disaster recovery plan will contain, at the very least, the following:–
1. The potential causes of the disaster - details of likely causes of potential disasters, for example, it may identify concerns relating to fire, theft of data or hardware, problems associated with continued power loss or telecommunication failure.
2. Assumptions being made in the writing of the plan, for example there is the assumption that all relevant staff involved in the implementation of the recovery plan is available to support its implementation.
3. The scope of the plan – it will identify the areas of the infrastructure covered by the plan. In the identification of the scope of the plan it may also detail the areas of the organisation supported by the services being identified, the impact of potential disaster to that area of the organisation and a priority for recovery for each of the areas.
4. Policies to support continuity of the infrastructure in areas identified in the scope of the plan.
5. Staff with responsibility for ensuring adherence to each area of the plan.
6. Plan of action - in addition to identifying the staff members or teams with responsibility for the recovery of each area of the organisations infrastructure, the plan will also identify the steps they need to take to ensure recovery. The plan of action may contain details of steps to be taken within a given time frame from immediate steps to steps to be taken at intermediate stages during the recovery stages to on-going steps to be taken following the disaster and recovery from it.
7. Revision and testing plan - any disaster recovery plan should be tested and reviewed on a regular basis.
Possible Exam Questions
1) A company’s backup procedure is as follows: An incremental backup is performed daily A full backup is performed every month Describe how the company’s data will be recovered. Quality of written communication will be assessed in this question. [6]
The organisation may be at risk from natural/man-made disasters The organisation must be able to continue to function ... in an emergency capacity while the risk is active ... and to function normally as soon as possible after the risk has been eliminated The organisation needs to identify the risks/key personnel/key data/key functions The organisation needs an alternative location to switch over to
2)Explain why an organisation should have a disaster recovery plan. [4]
Incremental backup: This will make a copy of those datafi les that have changed since the last backup which may have been a full backup or an incremental backup Full backup: This will make a copy of all datafi les and provides a complete snapshot of data at time of backup Data recovery: Firstly, data from the previous month’s full backup will be restored. Then, the daily incremental backups since the last full backup will be restored/applied to the recovered data in reverse order to the order in which the incremental backups were performed
3)A business which uses a computerised information system has implemented a disaster recovery plan. (i) Explain why the business needs a disaster recovery plan.[4]If a natural disaster/flood etc occurs ... a business must be able to operate as normally as possible/in emergency mode ... until the emergency/disaster is over Critical or key data/processes/personnel identified/risks will be identified The backup and recovery method will be described An alternative location will be identified from which they can operate
(ii) State the main difference between a differential backup and an incremental backup. [2]
Differential backup Backs up data/files which have changed since the last full backup Incremental backup Backs up data/files which have changed since the last backup, whether full backup or incremental backup