Contingency Planning Of The Information System

A Disaster Recovery Plan (DRP) focuses on the recovery of IT systems, applications, and data in the

Presentation regarding the university’s Disaster Recovery Plan/Enterprise Continuity Plan including: basic structures; roles within the DRP/ECP plan; areas within a company if addressed improve resilience to catastrophic events, and an employee awareness campaign.

The purpose of the disaster recovery plan is to ensure the process of recovering mission critical systems has a plan of action in case of a disaster. The disaster recovery plan makes sure all the steps to bring up the critical to less critical systems

Among one of the missions of The U.S. Department of Homeland Security is to protect and preserve the security of the Cyberspace in the country. The principal objective of this Security Plan is to give instructions and direction for the Department’s workers and help the Homeland Security to create best practices and strategies in the IT security system.

During a disaster or emergency, the company must maintain normal operations required to address time-sensitive, disaster-specific issues. No plan can anticipate addressing all the human, operational and regulatory issues raised during a disaster or emergency.

The business continuity & disaster recovery is written into the policy to ensure each department knows and has a plan in case of an unexpected event such as a fire, vandalism, and natural disaster that would disrupt normal business. This part of the plan also states that data administrators are the ones responsible to implement procedures for critical backup of data and how long the recovery time would be which is set by the data stewards and other stockholders.

The first component is preparedness, which requires that the incident commander (IC) assess the situation, plan out the strategy,

The goal of the information disaster recovery processes and a robust contingency plan is to maintain the resiliency of General Hospital during any type of data disruption. Continuation of essential functions at all times requires the ability to adapt to changes and risks. The disaster recovery and contingency plans consider risk management and other security and emergency management activities that are

First, Incident Response (IR) plan “is a detailed set of processes and procedures that anticipate, detect, and mitigate the effects of an unexpected event that might compromise information resources and assets.” (Whitman, 2013, p. 85). Consequently, Incident response planning (IRP) is the planning for an incident, which occurs when an attack affects information systems causing disruptions. On the other hand, Disaster Recovery (DR) plan “entails the preparation for and recovery from a disaster, whether natural or human-made.” (Whitman, 2013, p. 97). For instance, events categorized as disasters include fire, flood, storm or earthquake. Thus, the differences between an Incident Response (IR) plan and a Disaster Recovery (DR)

The emergency operations plan will assign specific city agencies within the jurisdiction orders and responsibilities they must take on during an emergency. Each of their tasks will be clearly explained and will be assigned to that specific department or agency so they will have the capability to perform them accordingly. As well as the type of assistance will be needed from the state, North Carolina, surrounding countries, federal government, and private entities. The emergency operations plan will include and prepare the cities agencies and departments that will be needed in an emergency crisis. Homeland Security, law enforcement agencies, the fire department, emergency medical services agencies, and hospitals will be the main agencies and departments on scene, each

The DR team is responsible for managing and executing the Disaster Recovery Plan. This team will respond to disasters and help recovery efforts by re-establishing critical business operations at an alternate site.

After the business continuity plan is completed Incident Response (IR) planning and incident response plan should be performed and established. An incident response plan is “a detailed set of processes and procedures that anticipate, detect, and mitigate the effects of an unexpected event that might compromise information resources and assets.” (Whitman) This is done by first forming an IR committee, establishing an IR policy that integrates the business impact analysis into the incident response plan.

The risks that face an organization are going to always be present. However, an incident response plan outlines procedures for handling security incidents that occur within the organization and for correcting and documenting the security issue in a timely manner. The incident response team is trained to effectively implement the incident response plan. By containing an attack, and limiting the amount of time that an attack is allowed to continue, further risks to the organization can be mitigated.

Disaster recovery plan (DRP) is a clearly defined and documented plan of action for use at the time of a crisis. Typically a plan will cover all the key personnel, resources, services and actions required to implement and manage the DR process (comission, 2014).

Contingency planners are now asserting that contingency planning is a value-added component that can be a competitive advantage in the marketplace as well a means of helping organizations save money. Processes that are deeply analyzed in terms of continuity will usually be more secure, and new ways of working may emerge to help streamline operations. Contingency planning can be useful when forging alliances with external organizations or during acquisition phases. Contingency planning should be part of an organization’s quality cycle as well. “Business continuity and disaster recovery have gained somewhat in the eyes of top corporate management since the start of the 1990s. As the industry has slowly evolved from what could almost have been called a ‘black art’ to something starting to resemble a disciplined science, basic business principles have begun to become increasingly relevant” (Rothstein, 2003, p. 1).