Cloud Virtualization and Data Security Protection (Term Paper Sample)

Cloud Virtualization and Data Security Protection
Paul D'Ostroph
A Prospectus Presented to the Information Technology College Faculty
Of Western Governors University
in Partial Fulfillment of the Requirements for the Degree
Master of Science in IT Management
April 10, 2015
Abstract
Disaster recovery (DR) planning is an important activity that every company should undertake to protect itself against the risks associated with loss of data/information in the face of a disaster. Destiny Enterprises Limited has grown significantly larger in terms of acquired assets and the number of customers they serve. Disasters arising from physical calamities (like earthquakes), human causes (like terror attacks), and technical faults (like server crashes) can prove detrimental to the firm without a DR plan in place. This prospectus aims at describing an effective disaster recovery plan that will utilize cloud computing technology and virtualization to help Destiny Enterprises Limited (DEL) to mitigate risks from disaster strikes. The plan can effectively respond to any scale of disaster that DEL might face. IT managers/administrators and the management team will be the key stakeholders in this project.
DEL expects the Disaster Recovery plan to take up to four months to complete. The testing phase will occur in one month to help ascertain that DEL could continue operating normally following a disaster. Core network links and servers will be shut down for one hour to confirm that the plan works as expected. Afterwards, DEL will deploy the plan in its production environment. The plan will be monitored for one week before the appointed personnel takes an administrative role of checking and maintaining the system periodically. The results of having this plan implemented include increased customer confidence, more productive time for workers, improved availability, and security of data/applications, and increased revenue because of minimal downtimes and improved services.
Table of Contents TOC \o "1-3" \h \z \u Abstract PAGEREF _Toc416893901 \h 2Introduction PAGEREF _Toc416893902 \h 4Scope of the project PAGEREF _Toc416893903 \h 4Rationale PAGEREF _Toc416893904 \h 4Problem Statement PAGEREF _Toc416893905 \h 4Problem Background PAGEREF _Toc416893906 \h 5Need for the solution PAGEREF _Toc416893907 \h 5Reason for the solution PAGEREF _Toc416893908 \h 5Problem Statement PAGEREF _Toc416893909 \h 6Background Information PAGEREF _Toc416893910 \h 6Causes of the problem PAGEREF _Toc416893911 \h 6Problem Impacts PAGEREF _Toc416893912 \h 7Assumptions PAGEREF _Toc416893913 \h 8Proposed Solution PAGEREF _Toc416893914 \h 8Justification PAGEREF _Toc416893915 \h 8Consequences PAGEREF _Toc416893916 \h 9Measures to alleviate negative consequences. PAGEREF _Toc416893917 \h 9Alternative Solutions PAGEREF _Toc416893918 \h 10Implementation Plan PAGEREF _Toc416893919 \h 14Milestones PAGEREF _Toc416893920 \h 15Timelines PAGEREF _Toc416893921 \h 16Personnel PAGEREF _Toc416893922 \h 16Resources PAGEREF _Toc416893923 \h 17Budget PAGEREF _Toc416893924 \h 17Risk Assessment PAGEREF _Toc416893925 \h 17Post-Implementation Support PAGEREF _Toc416893926 \h 17Evaluation Plan PAGEREF _Toc416893927 \h 18References PAGEREF _Toc416893928 \h 19
Introduction
Scope of the project
This project will entail developing, testing, and implementing a disaster recovery plan that employs cloud computing and virtualization technologies (VMware, 2008) for DEL. This will involve conducting a Cost-benefit analysis, risk analysis, and business impact analysis for DEL and comparing alternative DRP solutions to determine what best suits the needs of the company. No upgrading of the current system or development of software will be needed –only the purchase of the cloud solution from the cloud services provider and its installation, maintenance, and testing, deployment and post-deployment support. Essentially, this will form the foundation for a reliable disaster recovery plan that DEL will be seeking for data infrastructure and application replication services (Hugos & Hulitizky, 2011).
Rationale
Data and information are critical resources for every business. There is an inevitable need to safeguard systems used in the management of these key resources (Brooks et al., 2002) to avoid business closure or challenges associated with disaster strikes. Currently, DEL is running its business without safeguarding the resources from potential disasters. The firm does not have a reliable disaster recovery plan in place meaning in case a disaster strikes, the firm will remain operational for a long time before restoring its services. Therefore, aspects such as the current server, network, and database technologies will not be part of this project’s scope. Cloud-based disaster recovery plans are the best technology today, which is also why DEL will need to adopt the solution in addition to just wanting to be prepared to deal with disasters that my happen.
Problem Statement
Businesses such as DEL value data/information face imminent threats from disaster related risks that lead to losses or business closure. DEL stores useful and sensitive data and information that drives its business. There is a need to ensure the company continues running its daily operations, uninterrupted by disasters. Without a well designed and tested DRP, DEL cannot be protected against disasters should they arise. This calls for sound disaster recovery plans to help recover from disasters (Williams, 2012).
Problem Background
DEL stores useful and sensitive data and information that drives its business but does not have a sound disaster recovery plan. There is a need to ensure the company continues running its daily operations, uninterrupted by disasters. Without a well designed and tested disaster recovery plan, DEL cannot be protected against risks associated with disasters if they happen. Therefore, DEL requires a disaster recovery plan that is well-documented and stored in one place where it can be quickly accessed. The plan must be well-organized, tested, and up-to-date.
Need for the solution
DEL does not presently have a DR plan; hence, it remains exposed to business risks should a disaster befall it. Moreover, a DRP is vital for business continuity and disaster preparedness planning which ensures that businesses continue transacting normally in spite of inevitable disasters. For instance, DEL would require to commit to offering continuous and seamless services to its customers. This alone demands that DEL have mechanisms in place to ensure that its technology supports, at minimum, the core business processes for its clients at all times.
Therefore, the absence of a DR plan in DEL’s case is a recipe for the company’s imminent downfall in the face of a major disaster and this must be addressed. Furthermore, this plan will ensure that the firm has optimized data backup strategy that offers sufficient recovery times. The approach of implementing a cloud-based data recovery plan is stress-free because most of the work is handled by the cloud service provider. The plan is cost-effective, and the speediest way to address disaster recovery needs of the company.
Reason for the solution
The reasons for using cloud computing for the proposed DR plan include the guaranteed protection of data/information and availability of business applications (VMware, 2008). The considered conventional DR solutions include/ Hot Backup Site, Cold Backup Site, and a Warm Backup Site. The alternatives under cloud-based solutions include Replication to Virtual Machines in the Cloud, Backup to, Restore to the Cloud and Backup to, and Restore from the Cloud. The selected option, Warm Backup Site has the benefits of a rapid startup from the warm state, meaning the business can return to its normal operation very quickly.
Problem Statement
Background Information
DEL stores useful and sensitive data and information that drives its business. There is a need to ensure the firm continues running its daily operations, uninterrupted by disasters. The current operations depend on periodic data backups, which are unsafe and takes a lot of time to restore services. Having loyal customers and not wanting to taint its business image, there is a need to ensure seamless services to clients. Subsequently, this calls for sound disaster recovery plans to help repair from disasters (Williams, 2012).
Causes of the problem
* Absence of relevant computing/IT knowledge and skills on this subject
* Limited knowledge - making DEL unwilling to attempt setting up a DR plan
* False sense of security in keeping periodic data backups
* Experienced IT staff members are overloaded with too much work
Problem Impacts
1 Customers’ inability to transact business normally due to missing network, applications, and data resources
2 DEL’s inability to reach out to its clientele to explain what is happening and intended solutions
3 Management never recognizes their role in disaster recovery efforts in absence of a DR Plan
4 IT/System administrators do not know how to respond to the disaster
5 DEL remains non-operational for long periods when they face such disasters
6 There is generally no communication on who should take charge of the recovery process
Table 1: Analysis
Cost Analysis

Description

Annual Cost

Cloud-based Data Backup Solution

$2,500.00

Fig.1. Business Impact Analysis Process (Brooks, Bedernjak, Juruan & Merryman, 2002).
Assumptions
* DEL’s management lacks knowledge on the value of a disaster recovery plan
* There are no reliable data backup and restore systems in DEL
* DEL is prone to many disasters such as fire, theft, and floods
* Management is willing to support the project for th...