Network Security Plan Paper

Disasters are unforeseen circumstances and the only way of tackling them is to be thoroughly prepared for the impact. The prime aim of having a Disaster Recovery and a Business Continuity Plan is to have minimal impact on day-to-day businesses. The Three-tiered business continuity plan suggested above considers many aspects of unanticipated problems and shows readiness to work around these

Routers will have firewalls on them checking whether or not the information coming onto the network is allowed.

Through the Federal Information Security Management ACT (FISMA) it was made mandatory that organizations would have to develop standards that would be in compliance with federal regulations that were put into place. Because of this the Federal Information Processing Standards Publication (FIPS) 199 and FIPS 200 were put into place in order to establish a set of standards for organizations so that they could determine what their category would be for their systems (NIST, 2012). In order to enforce the security categories from FIPS-200, the NIST SP 800-53 would be utilized in order to set in place a security control

There will be a disaster plan in place for such things as floods, storms, of equipment failure. All customer information will be backed up and on a secure network and system with password protected group policies.

Unauthorized access to LAN, LAN server operating systems software and applications vulnerabilities, compromise of confidentiality of data transmission via VLAN connection. Improperly secured wiring closets, data centers and computer rooms, Unauthorized access to systems, applications and data

This protection plan will address any security incidents such as security breach or emergency in the organization. The focus will be a coordination mechanisms which will be required to attain the vision and goals of the business prepared and instructed in an incident report. During the critical infrastructure protection plan there will be the need to review and revise any changes and prioritize to respond to changes in threat, technology, environment, business continuity, and other

According to the article, How to Successfully Implement a Disaster Recovery Plan on ameinfo.com, “most major organizations are running critical enterprise applications such as Enterprise Resource Planning (ERP), Supply Chain Management (SCM), and Customer Relationship Management (CRM). These applications are integrated across the enterprise to such an extent that they touch everyone from employees and customers to suppliers and partners, and they are the backbone and life-blood of the organization” (ameinfo.com, 2003). Implementing a good disaster recovery plan is highly imperative to ensure business continuity. However, one of the biggest challenges is convincing business leaders to recognize the need and fund the change. An organization should be prepared for all forms of disasters and catastrophes and have a disaster recovery plan in place that will allow the system should function normally under any of these circumstances. This alone will provide a huge competitive advantage and allow the organization to remain functional during potential down times. Natural or any other form of disaster is something that cannot be predicted and the company should be well prepared to deal with any untoward incidents. Any business utilizing IT systems should have proper backup and restoration methods to reset the system in case of emergencies.

Implementation -Implement procedures for existing authentication, access, controls, encryption, and backup. Security features should be configured enabled and verified. A final security review should be performed and engineer staff should test functionality and watch for any errors in configuration at this stage. A monitoring response plan can be put in place so IT knows the procedures when dealing with security breaches.

Every organization incident response planning should be a part of contingency planning program. Even with a security incident, proper planning can bypass being exposed to bad publicity and center media attention on the brisk

Disaster recovery plans allows and gives the opportunity to a business to be able to recoup from any number of disasters, whether it may be a natural disaster or a fault of equipment to include power loss. These plans can be fairly basic with a goal and summary of what is to happen in the event of a disaster, to intensely involved and well spelled out plans that break down the summary, personal, intent, goal, and a timeline of events to follow. While disasters are unforeseen events that a business may never see or have to implement their plan, it allows them to be setup for success if it were to happen and not be doomed for failure in hopes of it not being a possibility.

It is imperative to have a disaster recovery plan, it is no longer safe for any business, small or big, to have no protection against natural disasters or even getting hacked which is a common practice. Anyone of those

The security plan is formulated to protect the information and important resources from a wide variety of potential threats. This will promote business continuity, reduce business risks and increase the return on investment together with business opportunities. The security of information technology is attained by executing a suitable set of control, efficient policies, processes, organization structures, software and the hardware. These given controls ought to be formulated, put into action, assessed, analyzed and developed for productivity, where necessary. This will allow the explicit security and business objectives of the United States Department of health and Human Services to be accomplished (Easttom, 2006, p.32).

A Primer on How to Create a Bullet-Proof Disaster Recovery Plan for the Entire Organization

Network System Administrator Unauthorized access to the network Network traffic is controlled by Cisco enterprise-class firewall where inbound connects are only allowed to DMZ. Internal trusted network is provided via an encrypted VPN tunnel. Technical perimeter is established to bar direct access from the internet to the Internal Trusted Area.

Any organisation that have the usage of IT system needs to have policies in place that specify all the actions needed to deal with certain problems.