Testing and business continuity capabilities

1 Overview

It is often a worry of a client... if they mess something up... if they delete something... etc. how will the recovery work. For other clients the desire to "experiment" is important without the fear of breaking something. For this reason All n One provides a secured testing environment.

2 Infrastructure

• ww3.allnone.ie is the high availability, end to end encrypted primary solution
• ww5.allnone.ie is the testing environment.

3 Important Points of Note

• We do use https for public access to the service
• We do use encrypted ODBC connections
• The database server at rest is encrypted
• The comms room in Ballymount is under video surveillance.
• The comms room access in Ballymount is security swipe restricted and not all All n One staff have access.
• Backups are not made of the testing infrastructure
• Updates, versioning and patching is exactly the same as the live environment
• The infrastructure in ww5 is not high availability.
• There is no load balancing currently applied
• Server interaction audits are not maintained unlike the live environment

4 Process

4.1 Request process

So if you wish to avail of the testing infrastructure

1. A request is sent from the client to All n One to select a specific date time backup (if available) to use in the testing environment.
2. Support will double confirm the request via a different medium to facilitate the backup transfer
3. Within 8 working business hours, the desired backup file will be transferred to the testing environment
4. The backup will be unpacked and the testing environment checked by All n One staff
5. Email notification of the availability of the testing environment will then be made to all client system champions

4.2 Removal process

The test backup and data will not be touched by All n One unless requested. So if you wish to remove a backup from the testing infrastructure

1. A request is sent from the client to All n One to request the data is removed.
2. Support will double confirm the request via a different medium to confirm removal
3. Within 8 working business hours, the current data will be removed from the testing environment
4. Email notification of the availability of the testing environment will then be made to all client system champions

4.3 Important notes on the backup

• If you request a backup roll out it will replace any existing historical backup roll out. No merging or "backups of backups" can be supported.

• All n One reserve the right to perform one roll out per client month. Should > 1 per month be required an operational charge of 8 hours will be charged to the client.

• A "standing instruction" cannot be left with All n One to instantiate a backup. There must be monthly contact to request the transfer of data from the live environment.

• Scheduled data protection processes that may be in the live environment will not be scheduled / operated on the test data.

• The operational system files will always be available on the testing environment but the underlying databases will not be there unless explicitly requested.

5 Uses of this service

• Business Continuity / Disaster Recovery: This process can provide a backup solution / infrastructure if clients want to maintain an operational second site (albeit not as powerful as the primary site).

• Backup testing: For security purposes some Risk Registers in an ISO27001 process need to ensure that backups are working correctly. This process allows these to be performed.

• Experimentation on live data: As this is effectively a back up, new / interesting ideas can be played with in comfort of not destroying live data.

• Scenario / role plays: For security and operational demonstration purposes the second infrastructure can facilitate a broad range of scenarios.