Insurance brokers count cost of lost business as SSP SaaS platform outage enters second week

Unprecedented problems

Matt Hodges-Long, managing director of business continuity provider Continuity Partner, said he has never seen anything like the problems SSP is experiencing before: “This is probably the worst platform outage I’ve ever seen, just in terms of its duration and impact."

Aside from the incovenience and stress this is causing to the broker community, Hodges-Long said the customers they sell car insurance to could also be at risk, because they may not have been notified their policies have expired.

The information in SSP is used to update the Motor Insurance Database (MID), he added. This is used by police forces to ascertain the insurance status of cars on British roads, and if the information on it is out of data as a result of the downtime, this could see drivers being pulled over unnecessarily.

“For people whose policies have lapsed in the period it has been down, there is a real potential they wouldn’t have been reminded they need to renew their insurance so it auto-lapses. So there is a wider potential ramifications, beyond the brokers not being able to write new business,” Hodges-Long added. 

In a statement to Computer Weekly, SSP group CEO Laurence Walker said the company cannot confirm how long it will take to sort the situation out and get all those affected by the outage back online.

“We are continuing to work as quickly as possible to rectify the situation and getting all of our customers restored remains our top priority. We have made progress, but at present we are unable to confirm precisely how long the task will take to complete for everyone,” he said.

“Once again, we would like to express our disappointment about the delay, disruption and frustration experienced by our customers, for which we sincerely apologise,” added Walker.

Root cause analysis

The SSP Pure Broking downtime began on 26 August 2016, when a power outage caused an HP Storage Area Network (SAN) in the company’s Solihull-based datacentre to malfunction.

Efforts to restore the service, with HP’s help, ran into further problems on 1 September 2016 when a second SAN hardware failure occurred. SSP contacted customers to confirm it would be unable to restore the service – as promised – by Friday 2 September 2016, as a result of this.

The company has since released further updates, where it revealed the outage has accelerated its efforts to decommission the Solihull site, and migrate customers to two of its newer, Tier-3 datacentres, at least one of which is in West London.

The West London site, according SSP’s statement to Computer Weekly, is already being used to stand up new customer implementations of its software.

“We have the capability to undertake real-time data replication across the two [newer] centres, enabling us to offer a 15-minute recovery point objective for data restoration,” said Walker.

“Our Solihull datacentre has a more traditional daily backup, so to restore services for these customers we are working through a process of unpacking data from backup discs, recoupling it with application data, and then reconfiguring systems for individual customers.”

While this process plays out, brokers should regain access to the platform in stages, Computer Weekly understands, but it remains unclear how many have benefited from this so far.

At the time of writing, Computer Weekly was awaiting clarification from SSP about a subsequent datacentre outage at the West London site on 8 September 2016, which was referenced in a customer status update published on 8 September 2016. 

“We experienced some network issues connecting to our Powergate datacentre, which caused an intermittent service for part of this morning,” the update reads. 

According to reports on social media, this is thought to have caused further disruption for brokers who had previously said they had regained access to the platform.

Contingency planning

According to Continuity Partner's Hodges-Long, the common misconception that entrusting data to the cloud negates the need to backup that information elsewhere is likely to have exacerbated things for SSP users.

“Time and time and time again we see people say they don’t need to do that because it’s a SaaS platform,” he said. “We work with a number of brokers that use this and other platforms and there are ways to mitigate this. Even if it’s just a case of doing a regular download of upcoming renewals and contact details and storing that somewhere else but the SaaS platform.

“Anyone who relies on a SaaS platform for their business processes should really plan for the eventuality that it may not be available to them, and need to do the proper due diligence on the providers of those SaaS platforms to see what protection they can offer,” he added.

Compensation culture

Several of the brokers Computer Weekly spoke to said they are exploring their options with regard to pursuing SSP for compensation for any business they have lost as a result of the prolonged downtime.

Frank Jennings, a partner specialising in cloud contracts at commercial law firm Wallace LLP, told Computer Weekly that brokers could face a tough time seeking recompense from SSP.

“On the face of [the contract], it appears there was no provision for adequate failover or business continuity planning. In that case, I can’t imagine the contract will be in the firms’ favour when it comes to loss of business,” he said.

The case highlights the importance of building business continuity into any cloud deployment, not only to protect firms from outage but to make the process of switching providers easier, added Jennings.

“All firms, not just insurance brokers, need to undertake appropriate diligence on their providers from a business continuity perspective, and getting a better, quicker or cheaper IT service should not be at the expense of proper business continuity planning,” he said.

“This planning needs to ensure the provider maintains service and that the business can recover from an outage or other issue that affects service. Additionally, the business needs to be able to move away from a provider if it is unable to maintain service.

“Involving a third party in the process can be beneficial, such as one that maintains a back-up copy in case anything happens to the main provider. An expensive option maybe,” said Jennings. “But you get what you pay for.”