Business Continuity and Disaster Recovery for InfoSec Managers

4.6 Endnotes 153

Chapter 4

fied and kept in a list. Duplicates should be made of these documents, and

they should be moved to an offsite storage location. In preparation for

disaster, the organization should set aside a supply of emergency stationery

and office supplies. When disasters strike, media-handling procedures

should be established to deal with news crews covering the event. When

these situations occur, it is necessary to establish emergency authorization

procedures to allow people the ability to begin the recovery process without

having to wait on someone to make a decision. Finally, a special budget

should be prepared for backup and recovery phase operations.

4.5 Chapter Summary

This chapter has covered the basics of preparing for a possible emergency.

We discussed backup and recovery procedures and alternate business pro-

cess handling. Part of this discussion delved into the strategies for imple-

menting a fully mirrored recovery site, a switchable hot site, a warm site, a

mobile site, or a cold site. For IT systems recovery processes, we covered the

details of backup and recovery processes, storage solutions, network solu-

tions, desktop computers, software and licenses, LANs, servers, and Web

sites. Next, we discussed the issues regarding premises and essential equip-

ment backup and recovery, customer service backup and recovery, adminis-

tration and operations backup and recovery, key business information and

documentation backup and recovery, and the importance of reviewing

insurance coverages and knowing the carrier claims process. Key BCP per-

sonnel and supplies were covered, as well as understanding why it was

important to plan for the management and availability of your organiza-

tion’s key documents and procedures in a crisis situation. In the next chap-

ter, we will review the disaster recovery phase and the steps you can take

during the disaster to help your company.

4.6 Endnotes

1. Patterson, D., G. Gibson, and R. Katz, A Case for Redundant

Arrays of Inexpensive Disks (RAID). Berkeley: University of Cali-

fornia at Berkeley, 1987.

This Page Intentionally Left Blank