Archive for the ‘Data centered community’ Category

Tip #11 on Enterprise Disaster Recovery for IT Managers

Tuesday, May 18th, 2010

In a recent article in eWeek.com the headline read:

 ”Data Storage, Data Backup, and Storage Virtualization: 10 Important Enterprise Disaster Recovery Tips for IT Managers”

The article goes on to explain how Sepaton, www.sepaton.com a data backup provider from Marlboro MA, can backup very large data volumes using VIRTUAL TAPE LIBRARIES at a high rate of 34Tb per hour.   Clearly, this is  an important development for IT departments with large amounts of data to protect.  The article continues with 10 tips for Enterprise IT managers to address in their disaster recovery planning.  All 10 tips are valid and essential.  However, I would like to suggest an 11th tip which is commonly missing from most such recommendations:

Tip # 11.    Evaluate a Data Recovery lab or two and establish ongoing relations.  We at Cherry Systems have daily proof that is indisputable: systems and processes designed by humans will fail.   Murphy’s Law clarifies it by saying that it will happen at the worst time!  Therefore if our experience is a good indicator and Murphy’s law concurs then the 11th tip should be included and executed.

By saying executed, what does it mean?   It means that IT management should establish communication and form relations with a P.D.R (Professional Data Recovery) http://www.cherrysystems.com/blog/data-recovery-recognizing-a-professional-part-2 provider, who can consistently recover lost data.   

IT managers:  Don’t wait until that awful day lands in your lap.  Safeguard your disaster recovery plan with a proven data recovery  provider.

Are you committed to protect your data, and want to know how? Part 1

Friday, May 14th, 2010

We at Cherry Systems, are asked daily by individual, small business and mid-size clients, “What should I do in the future so this will not happen again?”  The simple and easy one word answer is BACKUP.   It could be equated to another recurring question people ask, “What is the healthiest diet?” A one word answer to this one is VITAMINS. To continue the analogy of backup-vitamin, both require variety and frequency.

 The three primary backup methods to consider:

  1. Personal backup device (external drive, Thumbdrive, One-Click-Backup-device)
  2. On-premise network storage media (shared drive on one of the systems, or a NAS device on the local area network)
  3. Remote backup service:
    1. Remote shared drive like Jungle disk ,
    2. Remote backup unmanaged like Mozy ,Carbonite,
    3. Remote managed backup like Barracuda Networks 

 The costs:

1. At least $10-20 per month if you just have pictures and music and some odds-and-ends.

2. At least $35-55 per month if you have a small business.

Be careful with relying primarily on cost to make your decision.  As with other things in life, if it sounds too good to be true, it usually is.

Either solution you pick you will have to; 

  1. Make sure you know how to do a partial restore.
  2. Test it at least once a year, and when you make a significant configuration change to your computing environment.
  3. Reassess for data growth, don’t hesitate to find a proper replacement, see all the notes which apply to your new computing environment above.
  4. Perform a data inventory as frequent as you can, but no less then quarterly.  Compare it to the previous one.  Than ask yourself why is there a difference, can you explain what could have caused the increase or decline.

Review our next post on selecting the right backup method for your situation.

Data Recovery-Recognizing a Professional part 2

Wednesday, February 10th, 2010

As with all highly skilled professionals services, like doctors, dentists, CPA’s etc, the level of professionalism is achieved combining extensive higher education, years of training in the field, specialized industry specific tools and facilities.

Cherry Systems Inc. is an example of a P.D.R (Professional Data Recovery) provider. Our recovery process is based on the 3D Data Recovery worldwide standard.   As such some of our specialized software and tools are designed and marketed by DeepSpar  a company who adopted and adhere to that same standard.  On their web-site DeepSpar refers to the 3D standard as;

          Phase 1: Drive restoration

          Phase 2: Disk imaging

          Phase 3: Data retrieval

 For more information please go to http://www.deepspar.com/pdr-system.html and read the section “Know your terrain”

 

A P.D.R engineer knows the terrain;

The first D starts with properly diagnosing the media to determine the most efficient  process to recover the data.   There are two primary outcomes;

            1.  Drive performs electro mechanically well.

            2.  Drive has failed or failing.

                  A.  If drive is failing it must be restored to working condition,  which should allow the engineer enough time to make an image.

 

The second D is for obtaining a good image of the failing drive as QUICKLY as possible, since you never sure how long is the failing drive will cooperate.  A tool like DDI, developed by DeepSpar as well as other similar tools by other vendors, were developed to facilitate and automate storage media specific code to optimize the cloning processes.  Do not confuse a tool like DDI with a tool like Ghost by Norton. While they seem to do the same at a first glance, Ghost should only is be used if the drive is performing well. 

<*>Warning, a P.D.R tool like the DDI typically does a great job imaging a failing drive but it is no substitute for the skill and knowledge of the P.D.R engineer to monitor, manage, and tweak the process to a successful completion. 

 

The third D is the the one in which the file system is rebuilt utilizing the clone drive (see  the 2nd D) and recovered files extracted to a safe repository site, for delivery to an anxious customer.

 

When evaluating potential providers, you should ask if they are following the 3D standard. A provider that does not utilize proven specialized tools or bypasses the 3D standard, should not be considered a P.D.R provider.  If your data is valuable, don’t take chances – choose a professional.

How to Avoid Privacy Breach by Data Recovery Providers?

Friday, January 15th, 2010

In previous blogs we discussed the many sources of data loss, and that prevention can minimize many, but not all occurrences.   Execs in charge of data access and security sometimes overlook these less likely scenarios because they are few and far between.  But the impact of such occurrences can be potentially devastating and require timely resolution. Since most companies do not have an in-house data recovery lab, the only option, is to send the defective media to a third party lab.  So when that dreadful day comes, and data loss is looming, there is a frantic scramble to find a reputable data recovery lab.   The pitfall is that under the time constrains to save the data and the day, due diligence is typically limited to price and turnaround, often neglecting to take into account one of the key consideration SECURITY; “Is the data recovery company safe?”  Is the data recovery lab at par with the customer’s data security policies to prevent data leaks or at worse data breech?

In a recent article in Forbes, http://www.forbes.com/2010/01/05/data-recovery-privacy-technology-cio-network-breaches.html.  By Andy Greenberg  he cites a study done by Ponemon Institute ,  clearly linking data recovery to data breach, potentially causing a bad situation to turn real ugly.

Conclusion:

Fortunately, CIOs and IT execs can prevent this unsavory scenario by pre-selecting a data recovery lab who can maintain the security level the customer requires while successfully recovering the data.

Data Recovery D.I.Y software tools decisions

Wednesday, January 13th, 2010

For those seeking solutions to recover lost files, there are basically two options:

1.   Choose a professional data recovery lab, see discussions on www.cherrysystems.com/blog posts in late November and December 2009.

2.   Choose a Do-it-Yourself (D.I.Y) data recovery software tool from an ever-increasing array of software tools available, many touting their tool as “the best data recovery tool” you will ever need.   As data loss and data recovery become a mainstream issue, more companies are making an attempt to capitalize on this space.   Therefore we will focus on this subject in the post below and several subsequent ones.

 Clearly not all data recovery tools are the same, so choosing one can be a daunting task for the SMB/home user as well as the IT professional who only comes across this problem a few times a year.  This is partly due to the fact that there are so many variations of operating systems and there are so many ways to loose data on a storage device.

The providers of data recovery software tools can be placed in two major categories:

1.   Software houses selling tools for a wide variety of computing needs including data recovery.  Some of these products are very good but only address a limited scope of data loss problems.  However, many of these software tools are poorly designed and worse yet poorly supported.  Unfortunately, it is not simple to tell the good from the bad based on price alone.  Prices start at $39.95 and up.

2.   Data recovery service providers like Ontrack or MHDD also offer self-directed data recovery tools, in addition to providing a full range of professional data recovery services.  Typically these are well designed professional looking products, but with a hidden motive;  to give the customer a very light version of their in-lab tool, with the hope that should it not recover everything needed, the customer will be inclined to use their in-lab services. Prices start at $79.95

 Users considering D.I.Y. data recovery must keep in mind the following important points:

1.   No one tool, available on the market, solves all data loss problems.  They are typically designed to overcome a limited variety of crashes.  Just like you can’t have only one hammer which works for all jobs requiring hammering

2.   Software tools can only recover data from a fully functioning media.  If the drive is physically failing (which may not be easy to tell) you are at worse risking loosing it all, or at least wasting time and money trying.  (see upcoming blog post on Warning Signs of Physical Failure)

3.   How much time and money do you have, to buy, learn and experiment with the DIY tool?

4.   How important is the data to be recovered?  Truly consider the risk that you could do more harm than good to your irreplaceable data.

 You still have choices of action, but you need to consider them wisely:

1.   First consider your time constraints. Make sure you know how long it will take a pro to recover the data in case the tool you purchased and tried to use has failed.  Add to this the number of days you will allow to experiment with the DIY method, that will enable you to meet your recovery deadline.

2.   Consider the operating system, the type of files you are recovering (all data files are not made equally).

3.    Consider the media type the data is stored on, e.g. hard drive, flash drive, SSD’s etc.  Some tools work better (or not at all) on some of the media types above.

4.    Make sure you have a way to load the software on a system other then the one you have a problem with the data. Make sure you can connect the failed media to that system to perform the recovery. 

5.    NEVER! EVER! install the recovery tool on the failed media.

6.   Have enough available space on the drive you are attaching the failed media, to be able to copy out all the recovered files.

7.    DO NOT reuse the failed media until you have verified and re-verified the critical recovered files.

8.    Make sure that the failed media was not infected with a virus that will be happy to find a new home on the new media.

9.    If all of the above checklist is a go, locate a site that will list and compare data recovery tools, like http://data-recovery-software-review.toptenreviews.com/  (0r others).

10. Be prepared to deal with storage and data-specific unique lingo to be able to use the software. 

Please watch for our next post in this series on this blog “Should professional data recovery service sell data recovery software?”

How to maintain an edge in Data Recovery

Wednesday, December 23rd, 2009
Glipms into Cherry Systems parts inventory

Glimpse into Cherry Systems parts inventory

Due to the well documented economic woes in 2009, we experienced an increase in the number of abandoned drives.  Let me explain; an abandoned drive is one that Cherry Systems has made repeated attempts to contact the customer to either proceed with the recovery or retrieve the drive, to no avail, often up to 90 days after the evaluation is completed.   At that point we consider the media abandoned and move it into our long term storage, adjacent to our 9000+ parts inventory . In is not unusual for customers to return a year (or two!) later hoping to find an abandoned drive.  In all cases with the help of our advance job-tracking-systems we located the drive in our storage in a matter of hours and either returned it or completed the recovery to the surprise and delight of the client. 

Although I do not recommend this strategy for a client, this scenario tests and reaffirms how our systems and processes helps us keep our commitment to our  customers;

  1. We do not sell or reuse abandoned drives (except the use of non-data containing components)
  2. We take as good care (or better) of our customer’s media than they do themselves.

 It  is particularly significant at these times when many shoppers are so price sensitive, to realize the value of good, dependable and reliable service.

Data recovery provider 10 Commandments

Friday, December 11th, 2009

I believe it is time to draw some clear lines in the sand for our industry.   It is important for our vulnerable customers seeking a data recovery service to know that their precious data will be treated with the care and attention it needs and deserves and also know where we stand and demand the same standard of care from our competitions:

  1. We will not alter your original drive or data from the condition it was received.
  2. We return your original drive in the same working-condition it was received.
  3. We will not diminish the recoverability of a drive if the job was declined.
  4. We do not open customer data files, except;
    1. If customer specifically requested certain files to be tested.
    2. If a customer asked to view files prior to pickup.
    3. For limited random QC test if we suspect the data integrity is in question.
  5. We guarantee that customer data is removed from our storage, after delivery and acceptance confirmation.
  6. Abandoned or scrapped drives with customer data will not be resold, reused or be compromised to the public.
  7. Abandoned or scrapped drives will only be used to harvest components (which do not contain customer data) to be used in the process of recovering another drive in our lab.
  8. We only use your original drive long enough to make a clone. 
  9. A customer clone-drive is wiped after 30 days from the completion and delivery of the data.

10.  Every job is covered by our published NDA (Non Disclosure Agreement). In addition we will not disseminate, or make commercial use of, information disclosed during the recovery process, (e.g. client information, email address, username, passwords etc.).

Certification for business and data recovery professionals

Thursday, December 3rd, 2009

I was reading recently a posting by Cole Shiflett on his blog http://coleshiflett.wordpress.com/2009/11/24/business-certifications-and-it-professionals/

And it brought into focus an issue that I have tried to raise with my data recovery peers in the past, the subject of certification.   There are three reasons to have certification:

  1. Stop the delusion of our industry by untrained unprofessional competition.
  2. Prevent or at least significantly reduce the chance of data loss due to unsuspecting customers taking their precious data to be recovered by individual or business not qualified to do the work.  The reason why this is so important is that the media may be damaged beyond recovery, while the unqualified attempting to perform delicate and highly specialized procedures they are not equipped and trained to do.
  3. Have a clearer picture of each provider certification and specialty, incase the recovery needs a very specific expertise.

Clearly most qualified lab can do the “common-run-of-the meal” recoveries, but then in addition they also develop specialties and expertise in a sub segment of our profession.  Like for example PDA’s, Optical SCSI drives, drive with severe media damage, etc.  If this was published information about a lab, it would help all of us who every once in a while come across one of those “unusual cases” and the customer is willing to pay what-it-takes to recover it.  So that we can refer the customer instead of just dismissing it as no-recovery.

Do we need a governing body to regulate hard drive manufacturers?

Thursday, November 5th, 2009

We are slowly realizing that our civilization is becoming irreversibly dependent on those purring, spinning, shiny platters devices, we call hard drives.   Yet most don’t know that there is growing evidence that the design and quality of some drives, simply put are un-fit to be sold as a reliable, dependable media to store our precious data. 

In addition data recovery companies need, better information and reliable availability of new parts to increase the success rate of data recovery for those unfortunate users who had lost their data, and possibly reduce the cost to do so as well. 

It is very unlikely that the drive manufacturer will agree to do anything about these growing problems on their own.  

So as reluctant as I am about adding regulation, I see no other solution to fix these issues.

Data recovery is a local issue

Wednesday, November 4th, 2009

Like politics data recovery is a local issue.   Data recovery is entering main street as a needed service.  With more competition and a wider selection of service levels available in most regions.  It may not be immediately clear which lab has the capabilities, your data recovery need, but it is getting there.  So I see little reason for you to have to send your precious data half across  the country to be recovered.  There is too much uncertainty in doing so.

I like to illustrate this; would you consider sending your love one half across the country or further to treat a “common” medical situation if you knew there is a good doctor near, who can do it just as well?  I know the price is a factor, and I recognize that if you have a real unusual problem than you may have to consider a doctor half across the country.  But that doesn’t mean that from there on all your medical care will have to be done by the same physician.

Ask for local references first from your IT service provider, they should know which lab can do what level of service and do it well.