OUT OF BUSINESS?
Questions You Should Ask About Off-Site Data Protection Before it’s Too Late

By Ed Golden

You can bet on it. Every single day, companies of all sizes are shut down by disasters like fires, power disruptions, or employee sabotage (in fact, more critical data each year is lost to intentional or unintentional human disruptions than to acts of nature). And, these disasters can take by surprise and permanently put out of business any company that doesn't protect and secure back-up data off-site, off-line and out of reach.

But you can be prepared. Disaster veterans know that effective DR planning can make the difference between business survival or death. And, they know the value of a comprehensive search for the right data security provider. That choice, say DR veterans, can be one of the most important vendor decisions your company will ever make.

The following questions have been assembled to help select the right "total data security" provider. You'll notice that each question is directed toward one common goal: To make sure you're getting total protection by securing your back-up data off-site, off-line and out of reach.

FACILITY CONSTRUCTION
Is the provider's building dedicated only to total data security? Is it a free-standing, single-story facility? Are halon fire suppression systems (or equivalent) used rather than sprinkler systems? Does each vault have strict, independent climate control?

TECHNOLOGY
Does the provider offer electronic vaulting to its secured off-site facility? Does the security provider maintain an easy-to-use, informative web site? How is bar coding technology employed?

OFF-SITE SECURITY LOCATION
Is the provider's facility a safe distance from flood risks and known fault lines? Is it safely away from train routes or other industrial risks? Is the facility in a low-profile location away from high-crime areas?

ALARM SYSTEMS
Are vault and facility alarms UL-approved? Does the alarm system provide a detailed audit trail? Does the alarm system detect fire, water, motion, sound, vibration, magnetic door contact, temperature/humidity changes, window breakage and improper access code entry?

MEDIA TRANSPORT VEHICLES
Are the provider's vehicles dedicated to and customized for the safe transportation and protection of magnetic media? Do the vehicles' cargo areas have independent heating and a/c systems? Are the vehicles completely unmarked?

MEDIA TRANSPORT CONTAINERS
Are the data security provider's containers constructed with at least .22 gauge steel? Are they foam-lined and shock-resistant? Are they water, shatter- and fire-resistant? Are the containers uniquely labeled so as not to obviously identify the customer or contents?

SECURITY PROCEDURES
Are the provider's employees highly trained and consistently audited by supervisors? Does the data security provider ensure that media is not transported by your employees? At off-site location, is media commingled with other customers'?

DISASTER RECOVERY
Does the vendor have a detailed DR plan for its own recovery? Will the vendor respond to a local emergency in two hours or less? Can the vendor provide you with off-site security to and from your hot site or other recovery location?

A thorough investigation with questions like these will help ensure youre getting the maximum protection of your companys critical data. Any less, and you could be at the mercy of a situation you could have controlled.

About the author:
Ed Golden is National VP for Data Base, Inc. For more information, please check the Data Base Web Site at www.dbi.com Or, contact Data Base at 1.800.800.8110 for more help in selecting an off-site, off-line and out of reach data security program.