Business Continuity and Disaster Recovery for InfoSec Managers

329

Index

Emergency purchasing team, 123

Emergency services

external, 129–31

involvement of, 161–62

specialists, 162

Employees

morale, 64

sabotage, xxvii

termination procedures, 303–4

Encryption, lii–liii, 104

defined, 104

DES, 104

Environmental disasters, 31–42

droughts, 36–38

earthquakes, 38–39

electrical storms, 39–40

fires, 40–42

floods, 34–35

hurricanes, 33

tornados, 31–33

winter storms, 36

See also Emergency Incident Assessment

Environmental threats, 23

Epidemics, 62

Equipment

backup and recovery, 150

installation team, 123–24

new, purchasing, 181–82

nonproduction, 189

production, 189

Equipment/system failures, 56–59

air conditioning, 57

cooling plant, 58

internal power, 57

planning, 57

probability, 58

production line, 57–58

types of, 56–57

See also Emergency Incident Assessment

Executive management team, 124

Executive Order 12656, 13

Expedited Funds Availability Act, 13

External access controls, lv–lvii

host-based authentication, lvi–lvii

port protection devices (PPDs), lv–lvi

secure gateways, lvi

See also Access controls

External emergency services, 129–31

Facilities preparation team, 124–25

Facility questionnaire, 291–94

Federal Computer Incident Response

Capability (FEDCIRC), 302

Federal Financial Institutions Examinations

Council (FFIEC), 157, 193

Federal Information System Controls Audit

Manual (FISCAM), 213

Feedback questionnaires, 196

FEMA, 163

Mitigation Division, 44

Web site, 44

Finance team, 125–26

Financial impact, 84–86

Financial institution fraud, xxiv–xxv

Fire extinguishers, 114

Fires, 40–42

evacuation drills, 41

impact, 40–41

response options, 41–42

suppression and control systems, 112–14

See also Environmental disasters

Firewalls, 103–4

application gateway, 104

circuit-level gateway, 104

defined, 103

packet filter, 103

proxy server, 104

See also Preventative measures

Floods, 34–35

contingent floodproofing, 35

emergency floodproofing, 35