Company Policy

All companies in today’s world need a disaster recovery plan in place to prevent risks of losing important information that may lead to loss of business, privacy issues and disruption in everyday operation. Each company, however, basing on the types of information housed and structure of the company can have different disaster recovery plans in place. There is not a one-size-fit-all plan out there that satisfies every company’s purpose. In this case, our client is a medium-sized federal contractor in need of a plan for system and network recovery with special stress on the need of natural disaster prevention measures. In the subsequent sections we will detail the objectives of the disaster recovery plan, scope and capability of the plan and

Policies are documents within the work place put together, influenced by law, by the manager. The policy will be designed around an area of practice that needs to be evidenced as being in line with law. The document gives a list of procedures for carrying out the task required,

A policy is a file or document that guides the service providers with principles on their how the

A Disaster Recovery Plan (DRP) focuses on the recovery of IT systems, applications, and data in the

“A policy is a statement of guidelines or rules on a given topic. A procedure describes the steps used to perform a given task or project.” (1) Tennessee

Due in Week Seven: Outline the Access Control Policy. Describe how access control methodologies work to secure information systems

Another step involves security checks upon implementation and describes agency-level threat to the business scenario or the mission. It similarly entails sanctioning the information system for processing and lastly constant monitoring of the security controls. FISMA and NIST's standards are aimed at offering the ways for agencies to achieve their identified missions with safety commensurate with the threat (United States Department of Agriculture, 2015). Together with guidelines from the Office of Management and Budget (OMB), FISMA and NIST create a framework for advancing and growing an information security scheme (SecureIT, 2008). Such framework includes control descriptions and evaluation, program development, and system certification and accreditation. The final objective involves conducting daily functioning of the agency and achieving the agency's articulated objectives with sufficient security commensurate with risk.

5. Of the three Systems/Application Domain risks, threats, and vulnerabilities identified, which one requires a disaster recovery plan and business continuity plan to maintain continued operations during a catastrophic outage? The mainframe or complete data loss. This should have an extensive DRP.

In this assignment, I will go over the different items related to the disaster recovery plan. I will go over the purpose of the plan, explain the key elements that go into a plan, the methods of testing the plan, and why we test the plan. All while explaining why the disaster recovery plan is so critical to businesses in the event of an emergency.

The following document is a sample Acceptable Use Security Policy using the outline identified in the Security Policy Template. The purpose of this sample document is to aid with the development of your own agency Acceptable Use Security Policy by giving specific examples of what can be performed, stored, accessed and used through the use of your departments computing resources.

|Review of Informational |Whether the Information Security Policy is|The security policy |Without the review of |Each policy should be |

Discuss the importance of disaster recovery and/or business continuity planning with respect to maintaining the confidentiality, integrity, and availability of information and information systems.

This Disaster Recovery Plan (DRP) describes the strategy and procedures for recovering vital information systems, records and data should a disaster substantially disrupt operations.

| |1. Obtain and study a copy of the client's policies |BZ |6/12/OX |N/A | |

Availability: Ensuring that systems and data are accessible to authorized users when they need it.