Incident Response Plan And A Disaster Recovery

1591 Words7 Pages
Question 1: First, Incident Response (IR) plan “is a detailed set of processes and procedures that anticipate, detect, and mitigate the effects of an unexpected event that might compromise information resources and assets.” (Whitman, 2013, p. 85). Consequently, Incident response planning (IRP) is the planning for an incident, which occurs when an attack affects information systems causing disruptions. On the other hand, Disaster Recovery (DR) plan “entails the preparation for and recovery from a disaster, whether natural or human-made.” (Whitman, 2013, p. 97). For instance, events categorized as disasters include fire, flood, storm or earthquake. Thus, the differences between an Incident Response (IR) plan and a Disaster Recovery (DR)…show more content…
Additionally, the preparation phase covers all fundamentals of an incident response plan, reports interaction among basics, and increases to emergency response planning at some point in the life of an incident in order to develop the necessary trust relationships that will be fully exercised during the stress of a real crisis. According to Whitman (2012) “The Disaster Recovery Plan Similar in structure to the IR plan, the DR plan provides detailed guidance in the event of a disaster. It is organized by the type or nature of the disaster, and specifies recovery procedures during and after each type of disaster. It also provides details on the roles and responsibilities of the people involved in the disaster recovery effort, and identifies the personnel and agencies that must be notified. Just as the IR plan must be tested, so must the DR plan, using the same testing mechanisms.” (P. 231). Many of the same principles of incident response apply to disaster recovery such as fundamentals must be clearly established, roles and responsibilities must be visibly outlined, someone must initiate the alert schedule and notify key personnel, someone must have the responsibility of the documentation of the disaster and only if it is possible, attempts must be made to moderate the impact of the disaster on the operations of the organization. Question 2: According to Whitman (2012) “An event can be categorized as a disaster when
Get Access