< Back to Main Site

EDUCAUSE review onlineEDUCAUSE review online

The Myth about Business Continuity and Disaster Recovery


© 2007 Cynthia Golden and Diana G. Oblinger

EDUCAUSE Review, vol. 42, no. 3 (May/June 2007): 10–11

"We've Got Backups, So We're Ready for Any Disaster."

Cynthia Golden and Diana G. Oblinger are Vice Presidents of EDUCAUSE. Golden leads the association's work in professional development. Oblinger is responsible for the association's teaching and learning activities and for the EDUCAUSE Learning Initiative (ELI). Comments on this article can be sent to the authors at cgolden@educause.edu and doblinger@educause.edu and/or can be posted to the Web via the link at the bottom of this page.

On most campuses, central systems that manage functions like payroll, human resources, development, and registration are backed up every night. So are course management systems, mail servers, and other key systems that run the campus IT infrastructure. Having well-managed processes that include full and incremental backups of data and that utilize offsite storage is, however, no indication that a campus is ready for a disaster. Backup procedures form only one part of a complex plan that should involve senior administrators, business and operational units, faculty, students, and, yes, technology to ensure that the institution can operate through and beyond a disaster situation.

The man-made disaster of 9/11 and the hurricanes and tornadoes of more recent years have focused attention on campus preparedness for disasters. But most campuses will not see such dramatic events. A broken water pipe, a cable cut by a local construction company, or an electrical failure is far more common. In a recent survey by the EDUCAUSE Center for Applied Research (ECAR), about half of the respondents reported that in the past five years, they had experienced disruptions that had triggered an emergency response by the IT group.1 These seemingly minor events, as well as major natural disasters, can be devastating to a campus. The process of anticipating potential problems, assessing risk, and preparing for recovery and continuity of campus operations during and after a disaster is not just the IT group's business—it is everyone's business.

Planning for business continuity, defined as the institution's ability to maintain or restore its business and academic services when some circumstance threatens or disrupts normal operations,2 needs to involve a collaborative and integrated campus approach in which each department understands the role it will play in restoring services, managing the crisis, and returning to normal operations. Although IT departments have traditionally been the drivers of the recovery process, they cannot accomplish campus recovery and continuity without help. Others on campus are critical to the success of this process:

  • Senior administrators and boards must clearly understand the risks of not being prepared for problems when the campus is not ready or able to handle a disruptive event: damage to the institution's reputation; loss of instruction time, research data, and eventually, students. Support and direction from the president and senior officers can serve as a catalyst for planning and preparation. Senior executives can establish a leadership structure, delineating expectations and accountability for every unit on campus to ensure involvement.
  • Department-level administrators play a pivotal role in the planning process. They have direct responsibility for how a process will operate. On one campus, the payroll manager used to quip: "If payroll goes down, get a big basket of money and pay the faculty first." Understanding how—and being able—to move to a "manual" mode for some campus processes can be a key part of the planning and preparation. System enhancements made for the sake of business-continuity readiness can actually drive the overall reliability of daily operations, a benefit that engages many of these administrators.
  • IT not only plays a crucial role in the recovery of the technology but also facilitates communications during some disasters.
  • Faculty engagement in the process ensures that business continuity can be built into academic activities (e.g., alternative ways to deliver classes, determination of potential impact on research data), as well as administrative operations.
  • Auditors are often instrumental in the process of business-continuity planning, not only acting as compliance drivers but also helping to assess risk.

The process of producing an institutional plan for continuity after a disaster is probably as important as the plan itself; its benefits will be evident even if the plan is never needed. Much like Y2K, business-continuity planning requires that key stakeholders work together to assess risk, prioritize work, and engage other campus units. Planning develops understanding across campus units, builds relationships, and fosters confidence.

The process of planning may also reveal weaknesses in current processes or systems. Addressing these weaknesses can improve campus operations on a day-to-day basis—a potential "selling point" for business-continuity planning on campus. The planning process could, for example, identify the need for immediately replacing or upgrading aging hardware, resulting in less maintenance downtime and fewer system outages for a key campus operation.

But producing an integrated campus plan is only one part of the process. If the plan sits on a shelf, it does no good. Testing the plan is an ongoing project. If backup tapes have never been tested, they may not work at a critical recovery point, and data won't be restored. If the payroll process is not routinely tested at the hot site, what price might the institution pay in the event of a disaster?

Lack of adequate funding is reported as the primary barrier to business-continuity planning, according to respondents to the ECAR survey.3 But even though having an effective plan will likely require an investment of resources, the cost of investing is typically much less than the cost of trying to recover from an unplanned disaster. If things go very wrong, the cost to the institution's reputation can't be underestimated. Developing a financial model that allocates resources for business-continuity planning and that does so across all institutional units is necessary for a plan to be successful.

In thinking about business continuity and disaster recovery, the CIO and other members of the executive team should ask themselves the following strategic questions:

  1. Can we risk not having a well-developed disaster-recovery plan? Performing risk assessment and identifying vulnerabilities can help a campus begin the planning process.
  2. Is business continuity considered an IT issue, or is it considered everyone's responsibility? Although "disaster recovery" has long been seen as the domain of the IT unit, the involvement of everyone on campus is key to recovery.
  3. Are we conveying the importance of business continuity in our planning, support, and communications? Senior executives and campus leaders must work to foster an environment in which being prepared for problems and building recovery into normal business are part of the routine.
  4. As we develop the plan, are we willing to address any/all shortcomings that are found? Doing so will not only benefit the planning and recovery process but also have an immediate, positive impact on campus life.

Even the most thorough and well-funded plan has people at its core. People make the plan work, and the success of every recovery process depends on people. If everyone realizes that the planning process is a priority—and understands the role that he/she plays in the process—a successful plan and a prepared campus is the likely outcome. During an EDUCAUSE business-continuity summit, CIOs involved with Hurricane Katrina noted that good communication—before, during, and after an event—is what makes everything work. During a disaster, the safety of people comes first, followed by the restoration of campus operations. Having multiple communication channels (including parents, students, faculty, staff, and the public) enables a campus to deal with the circumstances of the moment, to make those decisions that can be made only during the actual event, and to eventually resume normal operations. In short, people are the essential "backups" for any disaster.


1. Judith A. Pirani and Ronald Yanosky, "Shelter from the Storm: IT and Business Continuity in Higher Education," EDUCAUSE Center for Applied Research (ECAR) Key Findings, March 2007, 6–7, http://www.educause.edu/ir/library/pdf/ecar_so/ers/ERS0702/ekf0702.pdf.

2. Ibid., 2.

3. Ibid., 3.

Cynthia Golden

Cynthia Golden currently serves as director of the Center for Instructional Development and Distance Education at the University of Pittsburgh, joining the University in August 2009. This Center supports the teaching and learning mission of the university through instructional technology, learning design, faculty development, online learning, classroom technology and media services.

Prior to joining Pitt, she was Vice President of EDUCAUSE, the professional association whose mission it is to advance higher education by promoting the intelligent use of information technology. At EDUCAUSE she led professional development activities as well as the association's content and knowledge management initiatives. Her portfolio included program and curricula development for management and leadership institutes, web-based seminars and other programs that serve higher education. She was also responsible for creating relevant and compelling learning experiences for members through the annual EDUCAUSE conference program, as well as the regional and special-topic conferences. Cynthia had general oversight for EDUCAUSE services and operations, and coordinated efforts with affiliate organizations.

Before coming to EDUCAUSE in 2001, she served as Executive Director of Computing and Technology Services at Duquesne University, where she had been the CIO since 1998. Before coming to Duquesne, Golden was manager of business applications in the Information Systems division at MIT, where she also coordinated administrative computing architecture. She was Associate Director of Administrative Systems at Carnegie Mellon University before joining the staff at MIT.

Golden has been a consistent contributor to professional development, as editor of the book "Cultivating Careers: Professional Development for Campus IT;" scores of articles, and even more conference presentations. She served on the Boards of Directors of the IMS Global Learning Consortium, the Seminars of Academic Computing and CAUSE; participated on two national program committees for EDUCAUSE; and served as a member of many professional association committees over a twenty-year period. She is a frequent speaker at campus and professional events.

Updated January 2011.


Diana Oblinger

Dr. Diana G. Oblinger President and CEO of EDUCAUSE

Dr. Diana G. Oblinger is President and CEO of EDUCAUSE, a nonprofit association whose mission is to advance higher education through the use of information technology. The current membership comprises over 2,300 colleges, universities and education organizations, including 250 corporations. Previously, Oblinger held positions in academia and business: Vice President for Information Resources and the Chief Information Officer for the University of North Carolina system, Executive Director of Higher Education for Microsoft, and IBM Director of the Institute for Academic Technology. She was on the faculty at the University of Missouri-Columbia and at Michigan State University and served as the associate dean of academic programs at the University of Missouri.

Since becoming president of EDUCAUSE, Oblinger has become known for innovative product and services growth as well as international outreach. For example, Oblinger created the EDUCAUSE Learning Initiative (ELI), known for its leadership in teaching, learning and technology innovation as well as several signature products, such as the 7 Things You Should Know About series. She also initiated EDUCAUSE's first fully online events and its e-book series, including Educating the Net Generation and Learning Spaces.

In collaboration with the Bill and Melinda Gates Foundation she led the creation of the Next Generation Learning Challenges, a $30M program focused on improving college readiness and completion through information technologies. Partners include the League for Innovation in the Community College, the International Association for K-12 Online Learning, the Council of Chief State School Officers, and the Hewlett Foundation.

Oblinger has served on a variety of boards such as the board of directors of ACT, the editorial board of Open Learning, the National Science Foundation's Advisory Committee on Cyberinfrastructure, and the National Visiting Committee for NSF's National Science Digital Library project. She currently serves on the American Council on Education (ACE) board and works with other higher education associations as chair of the Washington Higher Education Secretariat. Dr. Oblinger has testified before the U.S. Senate Committee on Employment, Safety and Training and the U.S. House of Representatives Subcommittee on Technology.

Oblinger is a frequent keynote speaker as well as the co-author of the award-winning book What Business Wants from Higher Education. She is the editor or co-editor of seven books: The Learning Revolution, The Future Compatible Campus, Renewing Administration, E is for Everything, Best Practices in Student Services, Educating the Net Generation, and Learning Spaces. She also is the author or co-author of numerous monographs and articles on higher education and technology.

Dr. Oblinger has received outstanding teaching and research awards, was named Young Alumnus of the Year by Iowa State University and holds two honorary degrees. She is a graduate of Iowa State University (Bachelors, Masters, and Ph.D.) and is a member of Phi Beta Kappa, Phi Kappa Phi, and Sigma Xi.


Stay Up-to-Date

RSS Email Twitter

Share Your Work and Ideas

Issues coming up will focus on top 10 IT issues and adaptive learning. Share your work and ideas with EDUCAUSE Review.

E-mail us >