Information Security Policy

Passwords should be designed to prevent them from being discovered by unauthorized persons. All passwords should have at least eight (8) characters. The user-IS should never be used as the password. Words in dictionary, derivates of user-IDs, and common character sequences such as “123456789” should not be employed.

impact of the identified risks to the organization based on key business drivers (loss of life, loss of

Tragic events that cause damage to property and life may destroy the social, cultural and economic life of a community. Communities must be engaged in the various phases from prevention to recovery to build disaster resilient communities. In order to do this, there must be a disaster preparedness plan in place that involves multiple people in various roles.

Disaster Recovery team had previously prepared Disaster preparedness plan, a Backup and Recovery Policy, and a Business Impact Assessment.

Presentation regarding the university’s Disaster Recovery Plan/Enterprise Continuity Plan including: basic structures; roles within the DRP/ECP plan; areas within a company if addressed improve resilience to catastrophic events, and an employee awareness campaign.

The purpose of the disaster recovery plan is to ensure the process of recovering mission critical systems has a plan of action in case of a disaster. The disaster recovery plan makes sure all the steps to bring up the critical to less critical systems

Due in Week Three: For your selected scenario, describe the key elements of the Disaster Recovery Plan to be used in case of a disaster and the plan for testing the DRP.

Additionally, the preparation phase covers all fundamentals of an incident response plan, reports interaction among basics, and increases to emergency response planning at some point in the life of an incident in order to develop the necessary trust relationships that will be fully exercised during the stress of a real crisis. According to Whitman (2012) “The Disaster Recovery Plan Similar in structure to the IR plan, the DR plan provides detailed guidance in the event of a disaster. It is organized by the type or nature of the disaster, and specifies recovery procedures during and after each type of disaster. It also provides details on the roles and responsibilities of the people involved in the disaster recovery effort, and identifies the personnel and agencies that must be notified. Just as the IR plan must be tested, so must the DR plan, using the same testing mechanisms.” (P. 231). Many of the same principles of incident response apply to disaster recovery such as fundamentals must be clearly established, roles and responsibilities must be visibly outlined, someone must initiate the alert schedule and notify key personnel, someone must have the responsibility of the documentation of the disaster and only if it is possible, attempts must be made to moderate the impact of the disaster on the operations of the organization.

According to the article, How to Successfully Implement a Disaster Recovery Plan on ameinfo.com, “most major organizations are running critical enterprise applications such as Enterprise Resource Planning (ERP), Supply Chain Management (SCM), and Customer Relationship Management (CRM). These applications are integrated across the enterprise to such an extent that they touch everyone from employees and customers to suppliers and partners, and they are the backbone and life-blood of the organization” (ameinfo.com, 2003). Implementing a good disaster recovery plan is highly imperative to ensure business continuity. However, one of the biggest challenges is convincing business leaders to recognize the need and fund the change. An organization should be prepared for all forms of disasters and catastrophes and have a disaster recovery plan in place that will allow the system should function normally under any of these circumstances. This alone will provide a huge competitive advantage and allow the organization to remain functional during potential down times. Natural or any other form of disaster is something that cannot be predicted and the company should be well prepared to deal with any untoward incidents. Any business utilizing IT systems should have proper backup and restoration methods to reset the system in case of emergencies.

Every business and organization can experience a serious incident which can prevent it from continuing normal operations. This can happen any day at any time. The potential causes are many and varied: flood, explosion, computer malfunction, accident, grievous act... the list is endless.

Disasters have become an inevitable part of businesses and organizations as well. They not only have a major effect on business and organizational continuity; they also result to an overhaul in organizational operational mechanisms (Awasthy, 2009). It is for this reason that many organizations and business resort to preparing business continuity plans and disaster recovery plans that will facilitate better disaster management in future. Effective disaster recovery plans are important to every business and organization (Thejendra, 2008).

Disaster recovery is the process of an organisation uses to recover access the data, and also hardware that are needed to recollect the performance to be in normal position after a disaster occurs. While disaster recovery plans have to be focus in every aspect in any organisation and bringing the gap closure after destruction it can be like data, hardware, or software have been lost and the manpower that composes much of any organisation.

Disaster Recovery Planning is the critical factor that can prevent headaches or nightmares experienced by an organization in times of disaster. Having a disaster recovery plan marks the difference between organizations that can successfully manage crises with minimal cost, effort and with maximum speed, and those organizations that cannot. By having back-up plans, not only for equipment and network recovery, but also detailed disaster recovery plans that precisely outline what steps each person involved in recovery efforts should undertake, an organization can improve their recovery time and minimize the disrupted time for their normal business functions. Thus it is essential that disaster recovery plans are carefully laid

Disaster recovery plan (DRP) is a clearly defined and documented plan of action for use at the time of a crisis. Typically a plan will cover all the key personnel, resources, services and actions required to implement and manage the DR process (comission, 2014).

The effective contingency plan should only include the high-priority items and it should be as simple as possible. The purpose for the contingency plans is to response quickly when there are changes of an organization’s current strategy. For example, the predefined strategy is based on some assumptions about the economy but the outcome is not what the organization assumed, the contingency plan can support the organization to react promptly. The effective contingency planning includes a seven step process. First, Identify both beneficial and unfavorable events that could possibly derail the strategy. This step includes the development of the formal contingency planning policy statement in order to provide it to relevant stakeholders the authority and guideline that required developing the effective contingency plan. Policy will be published when executive confirms it. To gather the high-level business requirements, define scope and allocating project resources. Second, Specify trigger points and calculate about when contingent events are likely to occur. It involves the Business Impact Analysis (BIA) to identify threat scenarios, prioritize key business processes and critical systems for business continuity. Executive approval on those choices of the critical business functions and the priority to recover during the disaster. Third, Assess the