{"id":11484,"date":"2005-04-04T13:04:17","date_gmt":"2005-04-04T13:04:17","guid":{"rendered":"http:\/\/gaisan.com\/blogs\/?p=11484"},"modified":"2005-04-04T13:04:17","modified_gmt":"2005-04-04T13:04:17","slug":"data-insurance","status":"publish","type":"post","link":"http:\/\/gaisan.com\/blogs\/?p=11484","title":{"rendered":"data insurance"},"content":{"rendered":"<p>Hi Dad,<br \/>\nHere&#8217;s a brief summary of the data insurance idea. <\/p>\n<p>A major and trusted insurer would offer a data insurance product to<br \/>\nbusinesses offering the following:<br \/>\n&#8211; Assessment of the total value of a business&#8217;s &#8220;data assets&#8221; based on their<br \/>\nfinancials and the weighted relative value of each category of data to the<br \/>\ncontinuity and ongoing profitability of that business. E.g. customer &amp;<br \/>\nsupplier accounts info is the highest priority for most sales\/distribution<br \/>\norganisations&#8230; while CAD blueprints are hugely important to architectural<br \/>\nand engineering practices. However, the valuation process is simplified by<br \/>\nmaking revenues\/profits the predominant factor in the calculation.<br \/>\n&#8211; An insurance policy covering the total value of their data assets<br \/>\n&#8211; A business interruption policy that they can claim against in the specific<br \/>\ncase of data loss or the partial or complete failure of their Information<br \/>\nSystems.<br \/>\n&#8211; Cost-effective data archival software that meets Recovery Point Objectives<br \/>\n(RPO), Recovery Time Objectives (RTO) as specified within the above policies<br \/>\n&#8211; Yearly assessment of data asset risk and BC preparedness. This could be<br \/>\ndescribed as a &#8220;data risk audit&#8221;<br \/>\n&#8211; Payment by monthly premium covering all the services, policies &amp;<br \/>\ntechnologies specified above. <\/p>\n<p>My reasons for thinking that Information Lifecycle Management &amp; Business<br \/>\nContinuity Management (BCM) services should\/could be offered to businesses<br \/>\nin this manner are partially explained below. (An extract from my market<br \/>\nanalysis document)<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nDespite a proliferation of Business Continuity service providers within<br \/>\nIreland, much of the SME market has yet to embrace their services. The<br \/>\nquestion we must answer first is why is this the case? Some possible reasons<br \/>\ninclude:<\/p>\n<p>&#8211;\tLack of education about BCM and DR services?<br \/>\n&#8211;\tLittle awareness of the effects of poor or non-existent DR planning?<br \/>\n&#8211;\tThe cost of the service is prohibitive or an incorrect value<br \/>\nproposition has been put forward by service providers?<br \/>\n&#8211;\tThe DR\/BC service providers are too large\/small to understand and<br \/>\nmeet customer requirements, both technological and cost?<br \/>\n&#8211;\tThe sales channel for DR services is incorrect?<\/p>\n<p>Looking at each of these questions separately it is apparent that many<br \/>\nbusinesses have no understanding of DR services and little awareness of<br \/>\nexisting service providers. Indeed the necessity for DR planning is<br \/>\nunderesimated by line executives. In a recent EMC\/Roper poll 52% of IT<br \/>\nexecutives versus 14% of line executives believed that their data was<br \/>\nvulnerable.   <\/p>\n<p>This information has been borne out by the preliminary results of our<br \/>\nsurvey. We have yet to survey a sample size large enough for meaningful<br \/>\nquantitative analysis but the comments of those surveyed have been helpful.<br \/>\nTwo of the respondents provide IT services to a small number of SMEs in the<br \/>\nmunster region. They stated that most SME&#8217;s believe that Disaster Recovery<br \/>\nand BCM involves &#8220;having a backup copy of some important files stored<br \/>\nsomewhere.&#8221; <\/p>\n<p>We fully realise that extensive primary market research will be necessary in<br \/>\norder to determine the viability of our proposed service. To this end, we<br \/>\nare developing a strategic plan for market analysis with SEBIC.  This plan<br \/>\nshould lead to a substantial revision of this report, both research and<br \/>\nconclusions, in the near future.<br \/>\nHowever with our current secondary research we feel able to confidently<br \/>\nstate the following:<\/p>\n<p>&#8211;\tReliable information on the BCM &amp; ILM market in Ireland is difficult<br \/>\nto find. There are many anecdotal articles and stories out there about BC\/DR<br \/>\nhorror stories and recent studies on the poor preparation of SME&#8217;s abound.<br \/>\nIt is more difficult, however, to determine the actual size and segmentation<br \/>\nof the market as most SMEs are clearly not interested in BCM products as<br \/>\ncurrently offered &amp; priced.<br \/>\n&#8211;\t The Irish market for BCM and ILM services is clearly underdeveloped<br \/>\n(&lt;29% takeup for BCM services throughout Irish business. SME&#039;s are least<br \/>\nprepared, source: EMC\/DELL);<br \/>\n&#8211;\tMost SME&#039;s are poorly prepared to mitigate against data loss in a<br \/>\ncrisis situation. . This is directly and indirectly causing business<br \/>\ninterruption and indeed failure; (43% of businesses that suffer major IS<br \/>\nloss fail within 1 year, source: IDC)<br \/>\n&#8211;\tBCM as a product has done little to catch the imaginations of the<br \/>\nsmall business community in Ireland. It is likely that it should be sold in<br \/>\na different manner, perhaps as a specific &quot;data insurance&quot; policy offered to<br \/>\nbusiness by a major and trusted insurer.<br \/>\n&#8211;\tLegislative changes and increased awareness should increase interest<br \/>\nin BCM and ILM services in Ireland. Mandatory certified ILM &amp; BCM is a<br \/>\ndistinct possibility if data retention, protection and availability laws are<br \/>\nproperly enforced.<br \/>\n&#8211;\tSome legislative changes would require small businesses to retain<br \/>\nmuch more data than is the current practice. <\/p>\n<p>E.g. if we assume that the average small business has around 2 GB of data<br \/>\nthen meeting proposed EU legislation requiring storage of all data for a<br \/>\nperiod of 5 years would produce 6 GB stored on average per year. (ignoring<br \/>\nreduction in storage service costs). However, undstructured data is growing<br \/>\nby over 100% per year in some cases yielding around 25 GB of data stored as<br \/>\na yearly average over the 5 year period. This represents. In excess of 1100<br \/>\n% increase in the data stored as old data is accumulated and new files are<br \/>\ngenerated. Even assuming that storage costs halve every 18 months, the cost<br \/>\nis still considerable. Especially considering conventional storage systems<br \/>\nrarely scale uniformly in both storage and price. <\/p>\n<p>&#8211;\tThere is already a vast amount of unstructured data stored<br \/>\nthroughout Irish SME&#039;s. The small IT consultancy organisations that<br \/>\nresponded to our queries estimate an average of 2GB of data for medium size<br \/>\n(~50 employee) SMEs. A very rough calculation would predict around 100,000 x<br \/>\n2 GB = 200 TeraBytes (TB) of information stored across Irish SMEs.<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;<\/p>\n<p>Talk to you later, <\/p>\n<p>   &#8230;shane<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hi Dad, Here&#8217;s a brief summary of the data insurance idea. A major and trusted insurer would offer a data insurance product to businesses offering the following: &#8211; Assessment of the total value of a business&#8217;s &#8220;data assets&#8221; based on their financials and the weighted relative value of each category of data to the continuity [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"http:\/\/gaisan.com\/blogs\/index.php?rest_route=\/wp\/v2\/posts\/11484"}],"collection":[{"href":"http:\/\/gaisan.com\/blogs\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/gaisan.com\/blogs\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/gaisan.com\/blogs\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/gaisan.com\/blogs\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11484"}],"version-history":[{"count":0,"href":"http:\/\/gaisan.com\/blogs\/index.php?rest_route=\/wp\/v2\/posts\/11484\/revisions"}],"wp:attachment":[{"href":"http:\/\/gaisan.com\/blogs\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11484"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/gaisan.com\/blogs\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11484"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/gaisan.com\/blogs\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11484"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}