|
Planning for Disaster and Recovery
is NOT Optional
Planning
what to do in the event of a natural or human disaster is imperative to
protect your staff, clients, work product, and physical office and equipment.
Here are some steps to take before an unexpected disaster hits.
by Ross Kodner
THE
TRAGIC EVENTS of Sept. 11 will not soon fade in our collective memory.
Of the multitude of businesses affected by the destruction of the World
Trade Center, many were law firms.
What happens when a law firm suddenly not only has no office, but has
no computer systems, no network, no Internet access, no furniture, no
office equipment, and no telephones other than cell phones? What happens
to pending cases and clients? What happens when confidential client information
is destroyed?
Disaster recovery is hardly a new concept for Americans. In Wisconsin,
attorneys and others still are recovering from the recent floods in the
Siren area. And who can forget the destruction of human life and property
caused by the Barneveld tornado? Still, no situation could ever drill
home the need for disaster planning and system redundancy more than what
so many experienced on Sept. 11.
Disaster Recovery Action
Steps
In order to recover from a disaster, you must have the mindset that a
disaster will occur, and plan for it.
1) Prepare a comprehensive disaster plan that includes a list of the
possible disruptions that can affect the safety of a firm's people and
the ability to practice law.
2) Prepare a data protection plan that includes a detailed, comprehensive
strategy for data and program backup. Anticipate the multiple factors
that can affect the ability of a computer network to generate work product
and be accessible when needed. For example, a hardware failure inside
the network fileserver(s) can be protected against by using redundant
hardware componentry such as:
an array of multiple hard drives or "duplexed" pairs of hard
drives and hard drive controllers
dual processors (which also improve network performance)
dual power supplies and dual fans and chassis cooling systems
a complete real-time "mirrored" redundant server system, which
is another fileserver ready to step in instantly and take over network
operations if the main server fails
"bulletproof" data backup, meaning a "real" tape backup system,
not a minimalist $300 TRAVAN tape backup system or attempting to back
up on a spanned set of 30 CD-ROM disks. A "real" tape backup system
is one that can be counted on: an ADR drive or a DAT, DLT, or AIT drive.
Make multiple alternating backup tapes. Back up everything on the network
server or a key stand-alone PC, every single day, without fail. Store
the most recent backup tape or other media out of the office and out
of the building. Cycle out heavily used tapes every year or two and
replace them with fresh backup media. Have a healthy distrust for your
backup system - test it regularly by randomly selecting files from a
recent backup tape, restoring them and checking their accessibility.
Purchase two tape backup devices, storing one out of the building in
a safe place, ready to install and use to restore backed-up information
if the primary tape backup device fails or is damaged.
3) Prepare for physical damage to your computer systems and coping with
and surviving "worst-case" scenarios. Assume that not only does your office
burn to the ground, melting your network fileserver, but that your off-site-stored
backup tapes refuse to restore your information. Companies like Ontrack
Data (www.ontrack.com) and Drivesavers (www.drive-savers.com) have managed
to recover data from hard drives that have been crushed, scorched, torched,
melted, flooded, driven over, and worse.
4) Protect your paper files by adopting a paperless office approach
and scanning your paper documents to build electronic files (which can
then be backed up). It is impractical to photocopy all paper files and
transport the duplicates off-site on any kind of regular basis. Aside
from its daily operational benefits, scanning your paper documents ensures
that a duplicate to every paper file is stored electronically on the computer
system and backed up nightly.1
5) Look for data redundancy in the law office software systems you purchase
and deploy. For example:
a) Document Management. Many document management systems (like Worldox,
iManage, or DOCS Open) have a "document mirroring" or "document shadowing"
function. Every time a user saves a document to its Windows folder on
the network server, a copy of the document is stored on that user's local
hard drive. If the server fails, rendering the network-located documents
inaccessible, the user still can work on documents previously saved from
the last 90 days. When the network is again operational, typically the
local hard drive's "mirror" documents are automatically synchronized back
to their proper "original" locations on the network server.
|
Ross
Kodner, Marquette 1986, is a Wisconsin lawyer and legal technology
consultant with Milwaukee's MicroLaw Inc. He can be reached at rkodner@microlaw.com.
Immediately following the Sept. 11 events, Kodner and others worked
with the New York State Bar Association to help build a clearinghouse
of information for New York lawyers displaced from their offices
or otherwise unable to reopen their practices. The information is
available at www.microlaw.com/nyrelief/index.htm,
which also contains a growing collection of disaster recovery-related
resources.
|
|
b) Case Management Synchronization or Replication. Many case management
systems allow synchronization of network-located case information to laptops,
allowing access to a rich range of case information, calendaring and docketing
entries, addresses and contact information, and so on, when a mobile lawyer
is working away from the office. A secondary purpose is focused on disaster
prevention, by synchronizing a case management system, every single day,
to multiple PCs in the office - not just laptops, but desktop PCs also.
In case of a network failure, multiple computers can access this critical
information. Once the network operation is restored or a damaged or destroyed
network fileserver is replaced, the individual PCs merely need to "re-synchronize"
their case managers to the central system to restore normal operation.
Conclusion
The bottom line is that tragedies can't be avoided, but the effect of
a tragedy on both people and technology systems can be minimized by anticipating
the worst case scenario and planning for it.
1 Information on the Paper LESS OfficeTM is at
www.microlaw.com/cle/plessindex.html.
|