Business Continuity and Disaster Recovery for InfoSec Managers

328

saving data guidance, 147

system configuration documentation, 147

Dictionary attack, lxi

Disaster event log, 162

Disaster recovery, 117, 155–69

emergency planning, 158–65

event log, 168

legal issues, 156–58

media and, 168

notification and reporting, 166–68

phase, 155–69

report, 168–69

summary, 169

Disaster Recovery Plans, xix, 5, 6, 7, 155

BRP coordination, 6

defined, 2, 7

fiduciary standard of care and, 156

scope, 7

Disaster recovery team (DRT), 119–20

involvement, 158

management actions, 165–66

members, 119, 120

mobilizing, 166–67

responsibilities, 119

Disaster status, 160–61

Discretionary access control model, xlvii–

xlviii

Disk replication, 142–43

Documentation

backup and recovery, 151–52

corporate proprietary, 186

offsite storage, 109

requirements, 19–20

system configuration, 147

Documents

backup and recovery, 152–53

damage assessment, 176–81

vacuum freeze-drying, 178

water-damaged, recovery, 177

Drainage/waste removal loss, 56

Droughts, 36–38

planning, 37–38

vulnerability, 37

See also Environmental disasters

Earthquakes, 38–39

Economic and Espionage Act of 1996, xxx

Electrical power failure, 55

Electrical storms, 39–40

Electronic vaulting, 144

E-mail, 305

Emergencies

business impact, 163–64

planning, 158–65

procedures, 115–29

state and federal involvement, 162–63

Emergency contact information, 89–90

key personnel and, 118

key suppliers/vendors, 118

Emergency Incident Assessment, 30–64

containment/environmental hazards, 61–

62

employee morale, 64

environmental disasters, 31–42

epidemic, 62

equipment/system failure, 56–59

health/safety regulations, 64

information security incidents, 59–61

legal problems, 64

loss of utilities/service, 54–56

mergers and acquisitions, 64

negative publicity, 64

neighborhood hazard, 63

nonemergency factors, 63

organized/deliberate destruction, 42–54

public transportation disruption, 63

workplace violence, 63

See also Risk assessment

Emergency management team, 122–23

Emergency master system shutdown switches,

114–15