Question about backups

[sqlcasey]

Hi,

I just wanted to get a "consensus" about this issue.

Our company recently moved its datacenter out of state. We are now using SAN technology for all of our data files and backups... that is, everything now resides on the SAN disk array - files and backups.

To date, we have no mechanism in place for off-site backups. Whereas previously we took daily tape backups and kept an archive of 30 days, we no longer have this in place. Instead we are keeping a maximum of 3 days worth of backups on the SAN before they get deleted.

Nor is there any off-site mirrorning of the SANs.

Basically, what this means is, if a very large rogue wave off the Atlantic coast were to engulf the builing where the SAN is housed, we can say bye bye to all of our data. Or even a nasty spilled cup of coffee, well you get the picture.

I've mentioned this several times to my manager, and he, as well as no one else seems to see the urgency in the situation.

What do you all think? I think that I cannot take responsibility for our databases in a catastrophic event, such as fire, theft or earthquake... I've made my point very clear, no one seems to be very concerned... and it's out of my hands.

 

[ptheriault]

As long as you have told your boss what's at risk then you've done your job. Is it possible for you to take each nigths backup, zip them and copy them to a server that is not in the data center?

- Paul
- If at first you don't succeed, find out if the loser gets anything.

 

[Catadmin]

If you want to take a paranoid CYA approach to the situation, try the following.

Send a polite email to your boss restating your concerns. Ask him to please verify, via email, what if any action you should take regarding the situation. Log a read receipt for the email.

If he refuses to reply by email, get very very worried. Otherwise, if he replies, send a copy of the reply, the original and the receipt to your home email as well as printing off copies of all three and putting somewhere safe. Then, when someone runs up to you later and says "Why didn't you get the backups off site", you can pull out the emails and say, "This is why".

Another course of action (and a bit less obvious) is to write up a Disaster Recovery document. State how you will recover from every possible scenario (if there's that much information, chances are the boss won't read it thoroughly). In the "Building is destroyed" section, make a note that data will be completely lost due to no off-site redundency. Get your boss to sign off on it, then distribute as necessary (after the sign off) so everyone knows their roles in case of disaster.



Catadmin - MCDBA, MCSA
"No, no. Yes. No, I tried that. Yes, both ways. No, I don't know. No again. Are there any more questions?"
-- Xena, "Been There, Done That"

 

[SQLBill]

Did you put/get it in writing that there is no concern? We had our data AND backups on SAN drives and lost the raid controller. That caused other problems and we lost the drives. Luckily, I had backups on tape.

-SQLBill

Posting advice: FAQ481-4875