Contingency Planning Management

Marco Cremonini and Pierangela Samarati, University of Milan, Italy

Introduction

Growing Dependence on the IT Infrastructure

Causes of Downtimes: The Prevalence of Small Disasters

The Cost of Downtime

Tangible Costs

Intangible Costs

BCM Planning

Understanding the Company's Business

Business Impact Analysis

Risk Management

Risk Analysis

Risk Mitigation

Risk Transfer

Recovery Strategies: Backup and Recovery of Data

Techniques for Data Backup and Recovery

Ensuring Continuity of Operations: Alternate Sites Strategy

Remote Mirroring

Backup and Recovery For Web-Based Hosting Services

Storage Area Networks

Training, Exercising, and Reviewing the Plan

Training and Exercising

Testing

BCM/DR Planning Template

Business Continuity and Investment Shortage

Conclusions

Glossary

Cross References

References

Further Reading

INTRODUCTION

Disaster recovery (DR) comprises a set of activities aimed at recovering and restoring critical business assets after the occurrence of an unforeseen event that has impaired corporate functions. From the 1970s era of EDP mainframes and centralized data centers until recently, DR has been associated with protecting against the consequences of external catastrophic events (e.g., floods, fires, or earthquakes). In turn, recovery and restoration activities were mostly focused on physical facilities and IT assets (data storages in particular) that could have been damaged.

However, the way in which companies are organized and managed has ...

Get Handbook of Information Security: Threats, Vulnerabilities, Prevention, Detection, and Management, Volume 3 now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.