Evaluate Weigh the pros and cons of technologies, products and projects you are considering.

IT resilience vs. disaster recovery: What's better for your business?

DR may be dying. The term DR, that is, not the actual process of disaster recovery. There is a move in the industry to replace the phrase with “IT resilience.”

At last week’s ZertoCON business continuity conference, analysts from Gartner and Forrester both threw their support behind using the term resilience over disaster recovery.

Stephanie Balaouras, vice president and research director at Forrester, said she dislikes the term “disaster recovery” because it tends to focus on catastrophic events, which can cause management to think it’s too expensive and rare.

Organizations need to move beyond disaster recovery and embrace resiliency, which is more concentrated on continuous availability and continuous improvement, Balaouras said. Customers don’t care what happened to cause an outage, they just want “always-on.”

Balaouras outlined three actions to improve IT resilience.

  • Calculate the cost of downtime. 57 percent of companies have told Forrester that they haven’t calculated that expense. And downtime is more than lost revenue — it’s loss of employee productivity and morale, as well as lost business opportunities. Organizations should calculate revenue and productivity losses plus customer impact, and present several loss scenarios.
  • Measure availability end-to-end. Availability is not about individual components, it’s the whole service, Balaouras said. When making your business case, take everything into account. As an example, Balaouras noted that the recent New York Stock Exchange outage was human error.
  • Match business objectives to the right mix of technologies. Balaouras suggests planning an evolution to active-active sites, which takes some time. Businesses should maximize virtualization investments for resiliency. And rethink failover and replication options, as the technologies are not “one size fits all.”

In his keynote address, John Morency, a research vice president at Gartner, said that IT resilience is becoming the new disaster recovery.

Most Gartner clients don’t use the term “disaster recovery” anymore — they want to focus more on IT resiliency, Morency said.

Newer technologies, such as replication, continuous data protection and snapshotting, are helping organizations enhance resiliency and proactively avoid recovery situations. While recovery time objectives used to be six to 18 hours for many, they’ve dropped to four hours or below, Morency said.

In her presentation, Balaouras also stressed the importance of time. With disaster recovery, downtime is measured in hours to days, while with IT resiliency, downtime is measured in minutes to hours.

Investments in disaster recovery are seen as expensive insurance policies and there isn’t enough emphasis in DR on the everyday events that cause the majority of business disruptions, Balaouras said. IT resilience investments, on the other hand, are driven by the need to serve customers and stay competitive, and resiliency is focused on all likely business disruptions.

Which term do you prefer?

Join the conversation


Send me notifications when other members comment.

Please create a username to comment.

An organization must perform a Business Continuity Planning (BCP) Process before having either a DR or IT resilience requirement. The Business Impact Analysis of the BCP determines what an organizations "resilience" should be through recovery time objectives (RTO'S). Information technology has no reason to be resilient unless a critical business purpose exists requiring that IT component.
From the article, it is obvious to vote for "IT resilience" but all dependence on the technology used behind the term. Also, this is natural, life goes on, things change and improve. So the term DR is quite old and should be changed.
You can put lipstick on a pig, but it's still a pig ! Maybe we should call it "Therapy for the Data Challenged" Stupid right? Call it what you want but it's still Disaster Recovery whether your using Tape Backups, Cloud restoration, Continuous Data Backups, whatever... Just another catch phrase for the same old for marketing purposes. If your system isn't available it's a Disaster, plain and simple, how you deal with it doesn't matter it's still recovery. I'm tired of everyone (typically the younger IT guys) trying to come up with new terms just to make the boss or the uneducated think their doing something new and wonderful. It's not just in IT, it's in every aspect of life, in an attempt to be politically correct, sorry PC. Oh it's time for more coffee.....
Thank you for the responses and the spirited discussion! What about a combination of the two processes?
Both terms have a place. IT resiliency is not something new and it's not the same as Disaster Recovery. Resiliency is about building an architecture that is capable of withstanding the loss of a component with minimal (or no) impact. Disaster Recovery is the function of restoring normal operations after an unplanned event. Both have there place, and as others have noted, investing in one over the other is a decision that needs to be made based on level of risk and cost impact (cost/benefit) to the business.