Business Continuity and Disaster Recovery for InfoSec Managers


Book Description

Every year, nearly one in five businesses suffers a major disruption to its data or voice networks or communications systems. Since 9/11 it has become increasingly important for companies to implement a plan for disaster recovery. This comprehensive book addresses the operational and day-to-day security management requirements of business stability and disaster recovery planning specifically tailored for the needs and requirements of an Information Security Officer. This book has been written by battle tested security consultants who have based all the material, processes and problem- solving on real-world planning and recovery events in enterprise environments world wide.John has over 25 years experience in the IT and security sector. He is an often sought management consultant for large enterprise and is currently a member of the Federal Communication Commission's Homeland Security Network Reliability and Interoperability Council Focus Group on Cybersecurity, working in the Voice over Internet Protocol workgroup. James has over 30 years experience in security operations and technology assessment as a corporate security executive and positions within the intelligence, DoD, and federal law enforcement communities. He has a Ph.D. in information systems specializing in information security and is a member of Upsilon Pi Epsilon (UPE), the International Honor Society for the Computing and Information Disciplines. He is currently an Independent Consultant.·Provides critical strategies for maintaining basic business functions when and if systems are shut down·Establishes up to date methods and techniques for maintaining second site back up and recovery·Gives managers viable and efficient processes that meet new government rules for saving and protecting data in the event of disasters




Business Continuity and Disaster Recovery Planning for IT Professionals


Book Description

Powerful Earthquake Triggers Tsunami in Pacific. Hurricane Katrina Makes Landfall in the Gulf Coast. Avalanche Buries Highway in Denver. Tornado Touches Down in Georgia. These headlines not only have caught the attention of people around the world, they have had a significant effect on IT professionals as well. As technology continues to become more integral to corporate operations at every level of the organization, the job of IT has expanded to become almost all-encompassing. These days, it's difficult to find corners of a company that technology does not touch. As a result, the need to plan for potential disruptions to technology services has increased exponentially. That is what Business Continuity Planning (BCP) is: a methodology used to create a plan for how an organization will recover after a disaster of various types. It takes into account both security and corporate risk management tatics.There is a lot of movement around this initiative in the industry: the British Standards Institute is releasing a new standard for BCP this year. Trade shows are popping up covering the topic.* Complete coverage of the 3 categories of disaster: natural hazards, human-caused hazards, and accidental and technical hazards.* Only published source of information on the new BCI standards and government requirements.* Up dated information on recovery from cyber attacks, rioting, protests, product tampering, bombs, explosions, and terrorism.




Security Technology, Disaster Recovery and Business Continuity


Book Description

Welcome to the proceedings of the 2010 International Conferences on Security Te- nology (SecTech 2010), and Disaster Recovery and Business Continuity (DRBC 2010) – two of the partnering events of the Second International Mega-Conference on Future Generation Information Technology (FGIT 2010). SecTech and DRBC bring together researchers from academia and industry as well as practitioners to share ideas, problems and solutions relating to the multifaceted aspects of security and disaster recovery methodologies, including their links to c- putational sciences, mathematics and information technology. In total, 1,630 papers were submitted to FGIT 2010 from 30 countries, which - cludes 250 papers submitted to SecTech/DRBC 2010. The submitted papers went through a rigorous reviewing process: 395 of the 1,630 papers were accepted for FGIT 2010, while 57 papers were accepted for SecTech/DRBC 2010. Of the 250 papers 10 were selected for the special FGIT 2010 volume published by Springer in the LNCS series. 34 papers are published in this volume, and 13 papers were wi- drawn due to technical reasons. We would like to acknowledge the great effort of the SecTech/DRBC 2010 Int- national Advisory Boards and members of the International Program Committees, as well as all the organizations and individuals who supported the idea of publishing this volume of proceedings, including SERSC and Springer. Also, the success of these two conferences would not have been possible without the huge support from our sponsors and the work of the Chairs and Organizing Committee.




Contingency Planning Guide for Information Technology Systems: Recommendations of the National Institute of Standards and Technology


Book Description

NIST Special Publication 800-34, Contingency Planning Guide for Information Technology (IT) Systems provides instructions, recommendations, and considerations for government IT contingency planning. Contingency planning refers to interim measures to recover IT services following an emergency of System disruption. Interim measures may include the relocation of IT systems sod operators to an alternate site, the recovery of IT functions using alternate equipment, or the performance of IT functions using manual methods.




Disaster Recovery, Crisis Response, and Business Continuity


Book Description

You're in charge of IT, facilities, or core operations for your organization when a hurricane or a fast-moving wildfire hits. What do you do? Simple. You follow your business continuity/disaster recovery plan. If you've prepared in advance, your operation or your company can continue to conduct business while competitors stumble and fall. Even if your building goes up in smoke, or the power is out for ten days, or cyber warriors cripple your IT systems, you know you will survive. But only if you have a plan. You don't have one? Then Disaster Recovery, Crisis Response, and Business Continuity: A Management Desk Reference, which explains the principles of business continuity and disaster recovery in plain English, might be the most important book you'll read in years. Business continuity is a necessity for all businesses as emerging regulations, best practices, and customer expectations force organizations to develop and put into place business continuity plans, resilience features, incident-management processes, and recovery strategies. In larger organizations, responsibility for business continuity falls to specialist practitioners dedicated to continuity and the related disciplines of crisis management and IT service continuity. In smaller or less mature organizations, it can fall to almost anyone to prepare contingency plans, ensure that the critical infrastructure and systems are protected, and give the organization the greatest chance to survive events that can--and do--bankrupt businesses. A practical how-to guide, this book explains exactly what you need to do to set up and run a successful business continuity program. Written by an experienced consultant with 25 years industry experience in disaster recovery and business continuity, it contains tools and techniques to make business continuity, crisis management, and IT service continuity much easier. If you need to prepare plans and test and maintain them, then this book is written for you. You will learn: How to complete a business impact assessment. How to write plans that are easy to implement in a disaster. How to test so that you know your plans will work. How to make sure that your suppliers won't fail you in a disaster. How to meet customer, audit, and regulatory expectations. Disaster Recovery, Crisis Response, and Business Continuity: A Management Desk Reference will provide the tools, techniques, and templates that will make your life easier, give you peace of mind, and turn you into a local hero when disaster strikes.




Business Continuity and Disaster Recovery Planning for IT Professionals


Book Description

Powerful Earthquake Triggers Tsunami in Pacific. Hurricane Isaac Makes Landfall in the Gulf Coast. Wildfires Burn Hundreds of Houses and Businesses in Colorado. Tornado Touches Down in Missouri. These headlines not only have caught the attention of people around the world, they have had a significant effect on IT professionals as well. The new 2nd Edition of Business Continuity and Disaster Recovery for IT Professionals gives you the most up-to-date planning and risk management techniques for business continuity and disaster recovery (BCDR). With distributed networks, increasing demands for confidentiality, integrity and availability of data, and the widespread risks to the security of personal, confidential and sensitive data, no organization can afford to ignore the need for disaster planning. Author Susan Snedaker shares her expertise with you, including the most current options for disaster recovery and communication, BCDR for mobile devices, and the latest infrastructure considerations including cloud, virtualization, clustering, and more. Snedaker also provides you with new case studies in several business areas, along with a review of high availability and information security in healthcare IT. Don’t be caught off guard—Business Continuity and Disaster Recovery for IT Professionals, 2nd Edition , is required reading for anyone in the IT field charged with keeping information secure and systems up and running. Complete coverage of the 3 categories of disaster: natural hazards, human-caused hazards, and accidental / technical hazards Extensive disaster planning and readiness checklists for IT infrastructure, enterprise applications, servers and desktops Clear guidance on developing alternate work and computing sites and emergency facilities Actionable advice on emergency readiness and response Up-to-date information on the legal implications of data loss following a security breach or disaster




Security Planning and Disaster Recovery


Book Description

Proactively implement a successful security and disaster recovery plan--before a security breach occurs. Including hands-on security checklists, design maps, and sample plans, this expert resource is crucial for keeping your network safe from any outside intrusions.




Principles and Practice of Business Continuity


Book Description

This comprehensive how-to guide captures the distilled wisdom and experience of Jim Burtles, a founding fellow of the Business Continuity Institute; an internationally renowned figure in business continuity with over 30 years of experience and teaching across 22 countries; and a veteran of practical experience that includes recovery work with victims of events such as bombings, earthquakes, storms and fires, along with technical assistance/ support in more than 90 disasters, and advice/guidance for clients in over 200 emergency situations. As such, this book is a gold mine of practical information, based on solid theoretical underpinnings. It is an ideal combination of the practice of business continuity - standards, best practices, global perspectives - and, the process of business continuity - planning, development, implementation, and maintenance. Jim presents a clear picture of not only how to do what needs to be done, but why. By striking a balance between theory and practice, Jim's approach makes the reader's job much easier and more effective. Illustrated with numerous charts, forms and checklists, the book covers business continuity management from start to finish: understanding risks; assessing impact and developing a Business Impact Analysis; choosing contingency strategies; emergency response processes and procedures; salvage and restoration; disaster recovery; developing business continuity plans, including those for business continuity, emergency response, crisis management, function restoration, and disaster recovery; maintaining long term continuity; reviewing and auditing plans; exercising and testing plans; crisis management; dealing with various personnel issues before, during and after a crisis; and working with a variety of agencies and people, including local authorities, regulators, insurers, fire and rescue personnel, and neighbors. This comprehensive reference based on years of practical experience will ensure that the reader is in a position to engage in all of the activities associated with the development, delivery, exercise and maintenance of a business continuity program. There is a glossary of 90 business continuity terms. The accompanying downloadable BCP Tool Kit has 24 planning and analysis tools, including sample plans for evacuation, emergency response, and crisis management; scripts and plot development tools for creating exercises to test and audit plans; analysis tools for fire exposure, service impact, resource requirements, etc. It also includes checklists, case studies, and Web references. In addition to those highlighted above, this book includes additional important features: Ideal for senior undergraduate, MBA, certificate, and corporate training programs. Chapter overviews and conclusions; charts, graphs and checklists throughout Glossy of 90 business continuity terms. Downloadable Business Continuity Tool Kit, including templates of a sample business continuity plan, evacuation plan, emergency response plan, crisis management plan; case studies and exercises; student assignments; Websites; reader self-assessment. Instructor Materials, including PowerPoint slides, Syllabus and Instructor's Manual for 8-week course, with emphasis on student role playing. Author is a business continuity management pioneer and legend




Official (ISC)2 Guide to the SSCP CBK


Book Description

The SSCP certification is the key to unlocking the upper ranks of security implementation at the world's most prestigious organizations. If you're serious about becoming a leading tactician at the front lines, the (ISC) Systems Security Certified Practitioner (SSCP) certification is an absolute necessity-demanded by cutting-edge companies worldwid




Business Continuity Management


Book Description

Discover new ideas and inspiration to build world-class Business Continuity Management from this masterwork that distills Hiles' wisdom about what works and why from 30+ years' experience in 60+ countries. First published in 1999, the new 4th Edition of Hiles' classic is the most international, comprehensive, readable exposition on the subject. It now includes: New or revised sections: New, extensive chapter on supply chain risk – including valuable advice on contract aspects. Horizon scanning of new risks. Fresh perspectives. Multilateral continuity planning. Impact of new technologies, including mobile computing, cloud computing, bring your own device, and the Internet of things. Extensive, up-to-the-minute coverage of global/country-specific standards, with detailed appendices on ISO 22301/22313 and NFPA 1600. BCP exercising and testing. Helpful discussion on issues relating to certification professional certification. New revealing case studies and vivid examples of crises and disruptions – and effective response to them. Updated action plans and roadmaps. Proven techniques to win consensus on BC strategy and planning. Hint of the future – what's next for BCM? Demonstrates step-by-step how to build and maintain a world-class BC management system and plan. Shares field-tested tools and hard-won insights about what works and why. Chapter learning objectives, case studies and real-life examples, self-examination and discussion questions, forms, checklists, charts and graphs, glossary, index. 520-page book + hundreds of pages of Downloadable Resources, including project plans, risk analysis forms, BIA spreadsheets, BC plan formats, exercise/test material, checklists, and a variety of editable models, templates, and spreadsheets. Instructional Materials coming soon including valuable educational tools, such as syllabi, test bank, slides – for use by approved adopters in college courses and professional development training.