Disaster Recovery is old-school, outdated, and dangerous. An almost provocative awareness for potential disasters must now hold sway, with attendant protections for outright prevention of bad outcomes – being that we are in an era whereby technology is not only enabling good things; we must realize that technology’s mismanagement is enabling extraordinarily bad things.
As discussed previously, the oil spill in the Gulf is a timely example of an extremely bad (and ongoing) outcome as delivered by technology. Technology allowed us out there, down there, and caused the opening of the oil field to the ocean.
To appreciate why DAPR is necessary, and to fully appreciate what it is, we must first completely understand it’s counterpart: IDRU – Inadequacy, Disaster, Runaway, and Unrecoverability. We debuted that term in the last post – let’s examine it in more detail and also provide an example that any person, whether “IT” or “Business,” can readily understand. This may help you examine and discuss your environment and potentials with your counterparts. IDRU is:
Inadequacy: Inadequacy is manifested as lack of awareness, lack of planning, lack of action, lack of results, and dire consequence. On a local scale, we’re aware of inefficient, ineffective, and inadequate attention, inadequate business, and inadequate technology (or use of it), leading to poor business outcomes.
We needn’t belabor inadequacy’s national influence: in America, we’ve achieved a large yield from inadequacies. Ready examples exist from both natural and man-made harm: the loss of New Orleans (through Katrina and neglected levees), and 9/11, respectively. The Gulf oil spill is the latest disaster. On an organizational level, the news is full of data breaches and harm to business…
Disaster: Today, disaster can manifest itself as a relatively new phenomenon: an individual, or small group of individuals, can dispense catastrophic harm through the actualization of Nuclear, Biological, or Chemical elements (NBC). Because relatively small groups now can possess a formerly disproportionate amount of power to harm, already possess the will to harm, and can exploit inadequacy on the part of those they desire to harm, we have a prevailing threat of disaster.
Beyond NBC, there are new threats of disaster so monumental, that their prevention is not just some measure of abeyance in the style of a 9/11; their prevention is necessary to deny a state of total Unrecoverability. A massive, generalized state of Unrecoverability has to be of overriding concern to the collective Business-Technology Weave, of any Nation, group, endeavor and person. Consider IDRU from the perspective of EMP: Electro-Magnetic Pulse. We will discuss that in some detail in an upcoming post.
Runaway: A simple analogy will serve: You are the driver of a car. You are speeding on a wet and winding road. There are signs, and they are warning: one gives the Speed Limit. One indicates Slippery When Wet. One indicates Dangerous Curve Ahead. Given the nature and conditions of the road, you should have an adequate awareness of danger, and you should have enough information to take action: to slow down, to drive with care, to prevent a bad outcome.
However, you fail to do these things. Your attention, concern, and actions are inadequate. You fail to imagine and plan for the contingency that soon happens: you cannot make the dangerous curve; you break through a guardrail; and you begin a plummet down a cliff. Your predicament was preventable, but now this, for you, is disaster.
But – you yet have ‘systems’ at your disposal. You mash the brake. There is no effect. You turn the wheel to the left, to the right – again, your action has no effect. In fact, your fall accelerates. You pull the emergency brake. You are in an emergency and beyond: You are in a condition of Runaway. You, and any action you take, are irrelevant to an inevitable outcome. It is, simply, too late.
Here, prevention wasn’t some part of a disaster plan – it was all of it. Once you begin Runaway, there is no meaningful action to be taken, and – regardless of remaining plan – no executable part of a plan that contains any meaning.
Unrecoverability: Once you’re in the zone of an inevitable bad outcome, you are in a position of Unrecoverability. Our car is in a Runaway condition, and the car and its occupant are now Unrecoverable – they will be smashed and killed, respectively.
Today’s Business-Technology Weave, and any measure of it, is susceptible to unrecoverable situations. Many companies mount expensive core business applications, platforms – so-called “solutions” - only to find them to be poor fits; often it’s an extremely expensive “wrong turn” and you’re through the guard rail heading for a business crash. I would imagine that any reader here has an example.
Ah, but there is hope. Stay tuned…
June 14th: On this day in 1834, Sandpaper was patented by Isaac Fischer Jr. of Springfield, Vermont]]>
Let’s examine new scales of risk, weighted outcomes, and what must be done in the face of escalating catastrophes – as delivered by ever more powerful technology. Over the course of this post and the next two, we’ll fold an examination of BP’s crisis (and ours) back down to the local organization, and what you can learn and do in preventing bad outcomes and in making fast, efficient, recoveries from the truly unforeseen. To help us, let’s consider the biggest news item of the day – indeed the past month and a half.
This week, the Administration in Washington decided to allow more drilling in shallow water (500 feet or less). New regulations are in effect, and newly require:
The CEO of the company must certify that a rig and anything happening with it meet all Federal standards. A professional engineer must be hired by the company to certify that the blow-out preventer works [DS – a blow-out preventer is a device to stop a leak once one begins; details did not include whether the “professional engineer” had to be an independent consultant, or merely someone who might be an insider; the next requirement would seem to indicate the latter]. Requirements also include third-party verification for the status of all blow-out prevention mechanisms. (Source: Fox News, The Fox Report with Shepard Smith, Major Garrett reporting, June 8th,2010).
Almost two months late and a few dollars short.
In seeing the recently released high-resolution video of the leak, James Carville said, “…this is a matter of national security; the Louisiana coast is being invaded right now… literally we’re under invasion from this oil. And I’m waitin’ for somebody to say, ‘Hey, we’re gonna fight ‘em in the estuaries, we’re gonna fight ‘em on the beaches, we’re gonna fight ‘em in the bayous, we’re gonna fight ‘em in the bays’… I mean, I’m with the Governor here [DS – Louisiana Gov. Jindal], let’s get this thing cranked up here.” (Source: CNN, Anderson Cooper 360, James Carville, June 8th, 2010).
I believe Carville has been on the leading edge of truly understanding and expressing just how dire the situation is in the Gulf. And at present, the condition is one of Runaway. The leak is in a runaway condition, whereby one of two things is happening:
- No one knows how to stop the leak – or –
- A method of stopping it is known (or at least suspected), but no one has managed to assemble the resources and team(s) that can deploy the method for stoppage.
Either way, BP’s own estimates now are that they’re capturing 15,000 barrels of oil a day from the leak. This leaves as much as 10,000 gallons yet flowing into the Gulf. This is a factor of 10 in terms of the original estimate for the leak (1,000 barrels/day) – after a nearly two month effort of containment. The situation is a catastrophe and its true scope and future impact are yet unknown.
What can Business and IT learn from this? In looking at certain outcomes from disasters, we can recognize that prevention is not some part of a Disaster Recovery Plan, or Business Continuity Plan – it is the goal and the whole of it. To further illustrate what we mean: During the Cold War between the old Soviet Union and the U.S., a defacto policy of MAD – Mutually Assured Destruction – held a nuclear exchange and total destruction at bay. There’s not likely much of a recovery plan post-apocalypse. Prevention was the goal and indeed whole of the plan – the great driving motivator that influenced all subsequent activity. An extreme example, to be sure, but a potent one nonetheless.
I’d like to introduce two concepts at this point that serve the local organization (and would have served BP) quite well: IDRU (id-roo) and DAPR (dapper).
IDRU is Inadequacy, Disaster, Runaway and Unrecoverability.
DAPR is Disaster Awareness, Preparedness and Recovery.
In the case of the BP Gulf oil spill (which is a yield of a failed weave of business and technology), IDRU is presently at play. There was an Inadequacy of awareness and respect for true risk and condition (given the present outcome, and well-reported disagreements on the rig concerning conditions and risk, there can be no argument regarding inadequacy here). We have Disaster (again, no argument). We have Runaway; certainly a runaway condition of spillage is occurring – when humans desire a stoppage of oil leaking into the Gulf, and the flow remains to any degree, we have a runaway condition.
That brings us to a very scary prospect: Unrecoverability.
The Gulf will be “cleaned.” At what cost? To what degree of “recovery”? How, and how long, will fish and wildlife be contaminated – and to what intensity? Will anyone eat seafood caught in the Gulf in the next two years? Five? 20? I don’t think anyone can say with certainty at present. It is truly frightening for anyone who examines the core problem and the tangential effects.
Disaster Recovery – even if perfectly mounted according to human capacities and limits – and associated concepts is not really sufficient here. DR must be supplanted with DAPR. Disaster Awareness – true appreciation for the scope of a potential disaster – and preparedness in the sense of prevention (where and as truly possible) is now necessary in an increasing number of arenas. Yes, there remains a recovery posture for the truly unforeseen; whether accident or deliberate events of harm. But a new standard of awareness and preparedness in terms of prevention is absolutely essential, given business’ reliance on technology and technology’s vulnerabilities in an imperfect world. Humans can’t be perfect either, but their record had better improve fast given the realities of The Business-Technology Weave.
It’s easy to look backward and make a couple suggestions: BP could have shrouded the whole mile-long pipe, blow-out preventer, and well-head in another outer pipe and dome. Why didn’t they? Expense. However, as my father would have said, “Cheap at twice the price,” given what BP will end up paying. Why not an automatic simultaneous relief well (presently being mounted) for deep water drilling? Again, cheap at twice the price. In these cases, it’s not just risk that must be evaluated against the bottom line – the scale of an outcome must weigh into measures of protection and prevention.
Again, a tenet of The Weave is paramount: In the realm of risk, unmanaged possibilities become probabilities. (Note: We’re not taking issue with deep water drilling vs. shallow drilling that is often prohibited due to environmental regulation. Our examination is based on the empirical, the observable and meritorious argument; not politics or preferences. Deep water drilling happens; preventions must be ultimate; lessons must be learned and applied).
For those at the local organization, you must think anew and bring fresh perspectives to assessment for potentials, scales of outcomes, and cost-benefit for outright preventions. IT folks are going to bear the burden for making these examinations – they naturally lead business counterparts in assessing vulnerabilities to The Weave from technical perspectives – and even from the human perspective (in terms of errors, inadvertent or deliberate harm to content, process, systems, etc.).
I actually sympathize with BP a bit. They are in the middle of an extreme catastrophe – as are the affected people in the Gulf. I believe IDRU and DAPR would serve BP, and other “potential BPs”, quite well. If the concepts serve you, that is good.
And this brings us to the next post… stay tuned.
June 10th: On this day in 1910 Howlin’ Wolf (Chester Arthur Burnett) was born.