ISM3003 Chapter 7 Final Exam

Testing (BCP)

*As opposed to traditional SDLC, testing in BCP methodology occurs after implementation *Simulate disaster scenarios *Have employees execute disaster recovery plans *Evaluate success and refine as necessary

Design (BCP)

*Build disaster recovery plan, detailed plan for recovering from a disaster. May include ~Collocation facility - rented space and telecommunications equipment ~Hot site - fully equipped facility where your company can move to ~Cold site - facility where your company can move to but has no computer equipment

SoA focused specifically on IT

*Customers *End users *Software development *Information needs *Hardware requirements

Distributed Network Infrastructure

*Distributed- distributing the information and processing power of IT systems via a network *First true network infrastructure *Processing activity is allocated to the location(s) where it can most efficiently be done

Information Needs SoA

*End users with access to all types of information *Integrated information, business intelligence, and knowledge *Data warehouses *Standard information formats *Integrity controls *No duplicate information Information would be treated appropriately as a valuable organizational resource - protected, managed, organized, and made available to everyone who needs it. An SoA philosophy leverages the most vitally important organizational resource- information.

Implementation (BCP)

*Engage any businesses that will provide collocation facilities, hot sites, and cold sites *Implement procedures for recovering from a disaster *Train employees *Evaluate each IT system to ensure that it is configured optimally for recovering from a disaster

End Users SoA

*Fully integrated ERP sytem *Interoperability among vendors *Interoperability of modules by the same vendor *Mobile computing (access to information and software regardless of location and device) End users should have access to whatever information and software they need regardless of where they (the end users) are An SoA philosophy requires that your organization view its end users of IT just as it does external customers

Analysis (BCP)

*Impact analysis - risk assessment, evaluating IT assets, their importance, and susceptibility to threat *Threat analysis - document all possible major threats to organizational assets *Impact scenario analysis - build worst-case scenario for each threat *Requirement recovery document - identifies critical assets, threats to them, and worst-case scenarios

Hardware Requirements SoA

*Integration of different technology and platforms *Large storage capacity *Your focus on logical, not physical *Safe and secure telecommunications platform Hardware is both integrated and transparent An SoA philosophy must pervade all choices in the realm of hardware

Organizational Strategic Plan (BCP)

*It all starts here *The strategic plan defines what is and what is not important *You must have a business continuity plan for what is important

Can extend SoA to the entire organization to be

*Lean and agile using resources in the best way *Proactive in addressing changes in the market *Quick to respond and adapt to advances in technology *Transformational in its processes, structure and HR initiatives to match a changing and dynamic workforce

Advantages of the Cloud

*Lower capital expenditures *Lower barriers to entry *Immediate access to broad range of application software *Real-time scalability

Customers SoA

*Multi-channel service delivery *Consistent, high-quality interactions regardless of the venue *Customizable product and service capabilities Customers should be able to "plug and play" into your organization and have the same pleasurable experience regardless of the channel An IT-enabled SoA philosophy allows your organization to provide customers with multi-channel service delivery options and customizable products and services.

Cloud Computing Goals

*Only pay for what you need and use *Real-time scalability (up or down) *Align computing costs with level of business activity *Reduce fixed costs in IT infrastructure

Maintenance (BCP)

*Perform testing annually, at a minimum *Change business continuity plan as organizational strategic plan changes *Evaluate and react to new threats *No "system" is ever complete

Software Development SoA

*SoA as a framewok *RAD, XP, and agile ad development methodologies *Exciting new developments like Web 2.0 Software development should focus on reusable components (services) to accelerate systems development. This means using component-based development methodologies and taking advantage of exciting Web 2.0 applications

Three Delivery Methods for Cloud Computing

*Software-as-a-service (SaaS) *Platform-as-a-service (Paas) *Infrastructure-as-a-service (IaaS)

BCP Methodology

1. Organizational strategic plan 2. Analysis 3. Design 4. Implementation 5. Testing 6. Maintenance

Business Continuity Planning

BCP- rigorous and well-informed organizational methodology for developing a business continuity plan, a step-by-step guideline defining how the organization will recover from a disaster or extended disruption -BCP is very necessary today given terror threats, increased climate volatility, etc.

Private Cloud

Cloud computing services established and hosted by an organization on its internal network and available only to employees and departments within that organization. -All benefits of cloud computing, except held private within an organization

Public Cloud

Comprises could services that exist on the Internet offered to anyone and any business *Amazon Web Services (AWS) *Windows Azure *Rackspace Cloud *Google Cloud Connect *ElasticHosts

Supporting Network Infrastructure

Computer Network - fundamental underlying infrastructure for any IT environment *Distributed *Client/server *Tiered

Infrastructure-As-A-Service

IaaS- model in which you acquire all your technology needs- storage hardware and data, network equipment, application software, operating system software, data backups, CPU processing capabilities, anti-you-name-it software- in the cloud. -All you need- smartphone/tablet and peripheral devices (e.g., printer)

Cloud Computing

Model in which any and all IT resources are delivered as a set of services via the Internet -Application software -Processing power -Data storage -Backup facilities -Development tools -Literally everything *Hottest term in technology today

Client/Server Infrastructure

One or more computers that are servers which provide services to other computers, called clients *Servers and clients work together to optimize processing, information storage, etc. *When you surf the Web, the underlying network infrastructure is client/server

Platform-As-A-Service

PaaS- delivery model for software identical to SaaS with the additional features of 1. The ability to customize data entry forms, screens, reports, and the like 2. Access to software development tools to alter the way in which software works by adding new models (services) and/or making modifications to existing modules

Software-As-A-Service

SaaS- delivery model for software in which you pay for software on a pay-per-use basis instead of buying the software outright. -Supports multi-tenancy- multiple people can simultaneously use a single instance of a piece of software.

SoA

Service-oriented architecture (SoA) - perspective that focuses on the development, use, and reuse of small self-contained blocks of code (called services) to meet all application software needs -Software code is not developed solely for a single application -Rather services are built that can be reused

Tiered (layer) Infrastructure

The IT system is partitioned into tiers (layers) where each tier performs a specific type of functionality *1-tier (Presentation Tier)- single machine *2-tier (Application Tier)- basic client/server relationship, the client handles the display, the server handles the request, and the application tiers is contained on one or both of the tiers. *3-tier (Data Tier)- client, application server, data or database server. A typical example is the web browser that acts as the client, an application server that handles the business logic, and a separate tier that handle the database function. *N-tier (Business Logic Tier)- scalable 3-tier structure with more servers. It balances the work of the network over several different servers.