The Mumbai rains that paralysed the city a few months back also revealed the loopholes in the supposedly infallible technology initiatives of various companies, especially those in the BFSI segment. After the deluge we heard stories of how customers faced problems trying to withdraw or deposit money; there were also reports of a growing list of insurance claimants.
Many insurance companies had to call for help from other cities for making surveys. Though these companies insure us, do they have systems guaranteeing that they themselves are safeguarded from natural disasters Do they have ready databases available at other sites, or for that matter, do they have a disaster recovery (DR) site
Here we try to find out how these companies cope with disasters. Do they have the infrastructure in place to deal with such calamities in future And for those who do not, are they on their way to planning for future emergencies
A DR plan is focussed only on how to recover the IT components so that business processes can be recovered. Ajay Patil, Head, Systems, Birla SunLife Insurance says, "DR can mean different things to different companies. In our organisation we have certain processes in place to manage the impact of a disaster. We do not have any specific DR software except backup and recovery. We use Veritas and Tivoli software for backup/ replication. All our applications and production data is backed up to the DR site. Our branches and central office are connected on the WAN. We have equivalent hardware and sufficient capacity to switchover our entire production load. Every night the production data is replicated at the DR site, and this is tested at least once in six months."
LIC and GIC were the early players in the insurance sector, hence the need for them to overhaul their systems. Reveals S K Kapahi, LIC's Executive Director for IT/BPR, "We are in the process of finalising a DR plan. Mumbai floods or otherwise, a DR system is necessary for any organisation having large IT initiatives. The main objectives under DR are to be able to provide services in the shortest possible time even if a disaster strikes. For selecting sites a number of factors such as safety, security and infrastructure have to be taken into consideration, and different sites may satisfy these criteria. Ultimately, the choice is left with the organisation based on its business considerations."
LIC, the biggest and oldest insurance company in India, is in the process of getting its IT infrastructure in place. The organisation has undertaken a lot of IT initiatives, one of them being warehousing with Wipro and Teradata at a cost of Rs 35 crore spread over three years. The need for warehousing is to have a centralised database. The vendors would be collecting data from LIC's 2,000 centres, placing it in a centralised location, and then building an MIS application over it. They then also plan to implement a CRM solution. This would help them in the integration of their delivery channels. Presently, they have call centres taking queries from customers, but once the data warehousing is centralised and linked to a network all the interactions can be tracked. Under the current system, LIC has a unique ID number for each customer, which allows them to know all about the interactions between their officials and the customer.
HDFC Standard Life has multiple UPS systems (main and backup) which can supply power for the main servers and telecom equipment for two hours. Physical access to the server room is controlled by an access control system. For desktops and laptops, guidelines have been provided to end-users to reduce risk. Critical systems have backup which can be started when the main system fails. Redundancy is provided for routers, switches, etc., and WAN links are provided with redundancy at critical locations.
At ICICI Lombard General Insurance, the core insurance applications are configured on multiple servers with a Network Load Balancing Service to ensure the even distribution of transaction load during peak hours.
The databases for their core applications are kept on a storage area network (SAN). The SAN ensures data integrity in case of an error on the database servers. According to Anuj Gulati, Head of Operations & Technology at ICICI Lombard, they take regular backups of their database or application servers based on pre-defined policies governing the specific application.
States Gulati, "In case of a failure, we have dedicated systems for urgent restoration on site. This gives us the ability to re-implement all our business-critical applications with a minimum turnover time at our DR site or production site in the event of total system failure. We also keep a copy of our backup media at an offsite location (Hyderabad) to ensure maximum data safety and security. Further, there are processes laid down and infrastructure in place to allow for system restoration within pre-defined timelines."
Investment in DR
Investment is the most important component of any decision-making process- and also the most negotiated one. DR services do not come cheap. Insurance companies look realistically at the cost of people, equipment, environment, maintenance, power, software licences, communications, etc. A decision based solely on price can have implications on the vitality of a DR plan.
Patil reveals that having a DR site was part of the business plan even at the time Birla SunLife started its operations in 2001. "What a DR plan has done is to ensure that our turnaround time for the customer will not suffer even in the case of a disaster. We have invested Rs 2 crore as the one-time set up cost, and around Rs 50 lakh per year is our recurring cost on DR infrastructure." Though Gulati was not ready to disclose the company's DR investment, their total IT infrastructure investment is about Rs 20 crore.