Tactical Advice

Which Disaster Recovery Site Strategy Is Right for You?

Be sure to factor in business objectives and continuity needs before making an investment.
Which Disaster Recovery Site Strategy Is Right for You?

Will you be prepared if disaster strikes your business? That’s the million (or multimillion) dollar question for IT professionals engaged in disaster recovery (DR) planning. Providing an affirmative answer requires the investment of time and money to build a solid disaster recovery plan.

One of the biggest issues facing disaster recovery planners is the selection of an appropriate DR site type. As with many IT decisions, planners are faced with a cost vs. performance tradeoff. The more spent, the greater the capability of a site to quickly resume operations.

When making these decisions, planners should consider their organization’s business objectives and the criticality of an immediate or near-immediate resumption of operations to the continued viability of their business. Financial institutions, healthcare institutions and other organizations engaged in time-sensitive computing activities may be willing to make sizeable investments to avoid a few hours of downtime that would seem unreasonable in other environments.

Cold Sites: Trading Availability for Cost

The cold site is the bare-bones approach to disaster recovery. These facilities have the basic infrastructure needed to run a data center, such as heating, ventilation and air conditioning (HVAC), power and network connectivity, but not much else.

Cold sites are designed to provide coverage for long-term outages of the primary site, such as those caused by a building fire, hurricane or other major disaster that renders the primary site completely inoperable. If a disaster does occur, an organization must then acquire the hardware necessary to resume operations, build systems, install applications and load data from backup tapes. It should be no surprise that the recovery time for cold sites is measured in days or weeks rather than in hours.

Alternative Locations for Cold Sites

If a cold site is the right strategy for your organization, there are some creative options to consider. It’s not necessary to purchase or lease a facility that sits unused until it’s needed. There are two major alternatives that can save significantly.

One option is to reserve space in a third-party cold site that will be available for use in the event of a disaster. If you do choose this approach, make sure the contract contains enforceable provisions that guarantee access to the facility when it’s needed. And don’t wait until a disaster strikes before learning that the site operator triple-booked the space. For similar reasons, consider contracting with a facility located a great distance away from the primary site. In the event of a regional disaster near a main data center, chances are there will be significant demand for recovery sites in that vicinity, if they are even still operating.

A second option is to create a cold site in a facility already owned by your organization and used for another noncritical purpose. Put the basic required infrastructure in place, and then reuse that space for offices, storage or other purposes until there’s a need to activate the cold site.

Warm Sites: The Middle Ground

For many businesses, the long activation time required to stand up a cold site presents an unacceptable risk. Warm sites address this by moving beyond the basic infrastructure provisioned at a cold site to include the hardware necessary to restore operations. Depending on the nature of the warm site, administrators may also choose to have the hardware loaded with the operating systems and/or applications required to resume operations.

Warm sites also include a copy of the organization’s data in some form. This could be as simple as storing backup tapes at the site and planning to restore all data from tape in the event of warm site activation, or it might be more advanced and include storage systems with replicated copies of the data.

The time required to activate a warm site depends on many of the decisions made when configuring the warm site:

  • Is the organization’s data stored on a storage system that can be directly accessed by servers at the site, or does it need to be restored from tape?
  • Are operating systems already loaded on the hardware at the site?
  • Are applications installed on those systems as well?

In cases where the answers to all of these questions are yes, an organization can typically activate the warm site in a matter of hours. In other cases, it may take several days to get the site up and running.

Hot Sites: The Cadillac Experience (and Price Tag)

Hot sites provide the ultimate disaster recovery experience, with instantaneous or near real-time recovery of operations when the primary site fails. Hot sites build upon the warm site concept by taking it to the next level: ensuring that systems at the site are preloaded with operating systems, applications and the data necessary to resume operations. The significant investment of time and money required to stand up a hot site provides the organization with the ability to resume operations in minutes or seconds after a disaster disrupts operations at the primary site.

Some organizations that have a handful of critical systems and business processes choose to implement a hybrid approach that uses hot site capabilities for a small number of essential services and a warm site approach for other systems that have a longer maximum tolerable downtime. This allows disaster recovery planners to focus scarce resources on the most critical processes without completely neglecting other services.

If considering a hot site, investigate the impact on your software license agreements. Depending on the language in your vendor contracts, you might be required to purchase additional licenses (at full price or a reduced rate) to support the hot site, as the applications will be in operation. Some license agreements allow for the installation of software at a hot site at no additional cost, provided that only one site is in operation at a time.

Selecting an appropriate disaster recovery site is one of the most important decisions made during the disaster recovery planning process. It’s important to carefully consider your specific business needs along with the costs and capabilities of each site option when identifying the best approach for your business.

Sign up for our e-newsletter

About the Author

Mike Chapple

Mike Chapple is an IT professional and assistant professor of computer applications at the University of Notre Dame. He is a frequent contributor to BizTech magazine, SearchSecurity and About.com as well as the author of over a dozen books including the CISSP Study Guide, Information Security Illuminated and SQL Server 2008 for Dummies.


Heartbleed: What Should Your... |
One of the biggest security vulnerabilities has almost every user and every industry...
Why Businesses Need a Next-G... |
Devices investigate patterns that could indicate malicious activity.
Review: HP TippingPoint S105... |
Next-generation firewall can easily replace a stand-alone intrusion prevention system....


The New Backup Utility Proce... |
Just getting used to the Windows 8 workflow? Prepare for a change.
How to Perform Traditional W... |
With previous versions going unused, Microsoft radically reimagined the backup utility in...
5 Easy Ways to Build a Bette... |
While large enterprises have the resources of an entire IT department behind them, these...

Infrastructure Optimization

Businesses Must Step Careful... |
Slow and steady wins the race as businesses migrate IT operations to service providers,...
Why Cloud Security Is More E... |
Cloud protection services enable companies to keep up with security threats while...
Ensure Uptime Is in Your Dat... |
Power and cooling solutions support disaster recovery and create cost savings and...


Securing the Internet of Thi... |
As excitement around the connected-device future grows, technology vendors seek ways to...
How to Maximize WAN Bandwidt... |
Understand six common problems that plague wide area networks — and how to address them.
Linksys Makes a Comeback in... |
The networking vendor introduced several new Smart Switch products at Interop this week.

Mobile & Wireless

Mobility: A Foundational Pie... |
Other technologies rely on mobile computing, which has the power to change lives, Lextech...
Now that Office for iPad Is... |
After waiting awhile for Microsoft’s productivity suite to arrive, professionals who use...
Visualization Can Help Busin... |
Companies need to put their data in formats that make it consumable anytime, anywhere.

Hardware & Software

Review: HP TippingPoint S105... |
Next-generation firewall can easily replace a stand-alone intrusion prevention system....
New Challenges in Software M... |
IT trends such as cloud, virtualization and BYOD pose serious hurdles for software...
Visualization Can Help Busin... |
Companies need to put their data in formats that make it consumable anytime, anywhere.