0800 083 7891Article > New Technologies in Forensics and Recovery

Your Details



* Required field

Drive Details

Additional Information

Please describe in detail the exact problem of the damaged media.

Our Clients

Article > New Technologies in Forensics and Recovery

Companies all over the world are running their present day-to-day business in a most competitive automated setting. These fully computerised businesses require their IT Managers to be on their toes at all times to manage the tremendous growth of data and protect it. This data comes in all forms, such as: databases, e-mail, stored files etc. It is stored permanently and archived to meet the regulatory requirements, and for any changes in business functions.

Data storage and preservation becomes the core activity of any business for survival. Currently, this data is facing threats in the form of natural disasters, disruption and damage to business from workers, power cuts, virus attacks, cyber crimes, and structural collapse or threat from terrorist activities. There is an increased awareness about protecting precious business data safely and the ability to recover it quickly and accurately to allow business to continue.

Data Recovery Management

We continue to witness hard drive failures, power problems, fire and flood as primary reasons for digital data loss. The volume in growth of media capabilities and the number of intricate systems used in storing the data has changed the very face of conventional ways of recovering data. The current business needs will not endure the loss of even a byte of data or a break in their operations. Any loss of critical data could lead to huge business loss.

Top companies are facing the problem of excessive data, a number of user applications and paucity of time for a regular data back up. They are all looking for a flexible infrastructure, broad data recovery managing preparations, together with the capability to reach tenuously placed backup support structures. Recovery management uses the recovery tier techniques to provide non-stop access to data and all the details that are required for any executive and supportive critical decisions. The level of expectations and requirements from these companies has moved to such an extent that they now sign service agreements for providing only ‘nil data loss’ and ‘negligible down time’ services.

Planning a Data Recovery Management

While planning for data recovery management the companies are looking for more than just backup and restoring the data concept. They are discussing the latest snapshot and replication or mirroring expertise for building recovery levels inside the storage settings with non-stop access to data. The information lifecycle management (ILM) values help to chart out the recovery management planning to reach end to end recovery management solutions.

Presently, a three tier system is used for data recovery management. They are called:

  1. The primary tier – all the inputs stored in the first stage equipment
  2. The protection tier – records of data stored in the back up as well as offsite; and finally,
  3. The recovery tier – the mass collection of data accumulated using snapshot and replication techniques. This enables the recovery of any amount of data from any of the tiers without loss of data or time.

Prior to agreeing a data recovery solution, and measuring the results, the following recovery procedure details, points of use etc, are discussed before signing the Service Level Agreements (SLA).

  • Recovery Time Objective (RTO): Defines how fast the data can be recovered
  • Recovery Time Granularity (RTG): Decide the time limit recovering logical failures
  • Recovery Point Objectives (RPO): Define recovery point set goals
  • Recovery Object Granularity (ROG): Define the volume of data recoverable
  • Recovery Event Granularity (REG): Deciding the track events of recovery.
  • Recovery Location Scope (RLS): Deciding the recovered data storage place.
  • Recovery Service Scalability (RSS): Defines quantity of data recoverable
  • Recovery Service Resiliency (RSR): Details of failure tolerance
  • Recovery Management Cost (RMC): Defines attainable cost efficiency
  • Recovery Consistency Characteristics (RCC): Define the quality of recovered data

More importance in the discussion is given for RTO (Recovery Time Objective) and RPO (Recovery Point Objective) for signing the Service Level Agreement.

The company providing the data recovery services must be equipped to have the following capabilities.

  • They should know how the risks will affect the business procedures, and advising of recovery plans and the appropriate stages for investing in them.
  • Providing a flexible design plan to control and reduce the risks involved in the business.
  • Offering a solution by regular assessment of business requirements and regular re-evaluation and revision of the recovery strategy to the changed business plans.
  • Provision of verifying tools with accepted support systems.
  • Organising a system for regular analysing, informing, managing accessibility, revival and stability.
  • Offering expertise in sourcing the data host for storing the data.

Commonly Followed Procedure

Depending upon the critical requirements of the data, a physical (a detached storage device kept offshore) or logical (a partition within the storage device) storing of replica is planned. Snapshot or mirroring is the commonly used technologies for creating replicas. All data is simultaneously replicated in a physical or logical device along with the current data in the same format using SMB (Server Message Block) technology. This replicated data does not need any restitution procedure because of its permanent and parallel online availability.

Continuous Data Protection (CDP): Normal backup of data is replaced by CDP. All the input data, and modified data is routinely saved. Auto saving of data facilitates the user and the system administrator to refurbish data automatically and saves a copy of every change made to data while enabling the user or the administrator to refurbish data with ease at anytime.

As discussed earlier, the online data recovery tier works synchronously with the protection tier for storing and auto backup. Most of the recently planned data recovery procedures have included an archive tier to meet the enlarged corporate policies of preserving the data for future requirements. This multi-tier access to data storing provides better service level agreements and enables complete data management.

Currently, recovery management solutions installed in an organisation provides managing and monitoring facilities to the system administrators. A concurrent observation of data protection and recovery becomes feasible from the system console. This helps the system administrators to observe and follow the installed data recovery system for data recovery, assigning safeguard resources, registering and reacting to flow of data, start recovery processes in case of exigency and manages service level agreements.

Any company preparing to introduce a data recovery plan has at present countless protection and recovery tool options. The best option can be implemented after considering their basic functions and requirements with a best Service Level Agreement.

Article: New Technologies in Forensics and Recovery

Created on: 2007-02-21 13:59:59

“Our laptop user was terrified they had lost work they had not backed up when their hard drive failed but Fields was able to recover 100% of the data.” - Jeff Davidson, Managed Systems UK Ltd
[ Read More ]