Business Continuity and Disaster Recovery for InfoSec Managers

330

landslides, 34

preparations, 34–35

watches vs. warnings, 34

See also Environmental disasters

Foreign Corrupt Practices Act (FCPA), 157

Fraud

business, xxv

communications, xxv

confidence, xxvi

financial institution, xxiv–xxv

gaming, xxv

government, xxv

insurance, xxv

Internet, xxiv–xxvii

investment, xxv

subscription, 51

telecommunications, 50–51

theft and, xxiv

utility, xxv

Functional organizational charts, 116

Gaming fraud, xxv

Gasoline-/diesel-powered generators, 111

Gas supply loss, 55

GIAC Information Security Officer (GISO),

317

GIAC Security Essentials Certification

(GSEC), 317

Global Information Assurance Certification

(GIAC), 316–17

Government fraud, xxv

Gramm-Leach-Bliley Act (GLBA), xxxvi,

xxxvii–xxxviii, 13

Hardening systems, 203–6

COTS software, 203–4

process management, 204–6

tasks, 205

Health Insurance Portability and

Accountability Act (HIPAA), xxxvi,

xxxviii–xl, 14

action areas, xxxix–xl

goals, xxxviii

impact, xxxix

Health/safety regulations, 64

Heat-resistant/waterproof containers, 114

Hot network nodes, 146

Hot sites

defined, 91–92

switchable, 135

Human resources, 186

Human threats, 23

Hurricanes, 33

Hybrid administration model, li–lii

Hybrid attack, lxi

Impact, 26

Incident handling, 301–2

Industrial espionage, xxix–xxxi

cases, xxix

defined, xxix

measures against, xxxi

Information

archiving, 109

backup and recovery, 151–52

corporate proprietary, 186

dissemination, 183–84

emergency contact, 89–90

sensitive, 60–61, 305–6

Information security incidents, 59–61

cybercrime, 60

IT system failure, 61

records/data loss, 60

sensitive information disclosure, 60–61

See also Emergency Incident Assessment

Information services team, 126–27

Information Systems Audit and Control

Association (ISACA), 211–12