Please enable JavaScript.

Coggle requires JavaScript to display documents.

15:4 (DISASTERS AND OTHER DISRUPTIVE EVENTS (Unanticipated/Unforeseeable…

- - - - system malfunctions
      - accidental file deletions
      - untested application releases
      - loss of backup
      - network denial of service (DoS)
        attacks
      - intrusions and viruses
  - - - IS auditor should evaluate an organization’s preparedness for
        pandemic outbreaks.
  - - - public relations (PR) activities in an organization may play an important role in helping to contain the damage to the image and ensure that the crisis is not made worse
      - few basic good practices should be considered and applied by an organization experiencing a major incident.
      - Reacting appropriately in public (or to the media) during a crisis is not simple. A properly trained spokesperson should be appointed and prepared beforehand.
- - - - because most key business processes depend on the availability of key systems infrastructure components and data
        
        it is a critical
        component,
        
        criticality of the various application systems deployed in the organization depends on
        
        nature of the business
        
        value of each application
        to the business.
        
        business is directly proportional to the role of the information system in supporting the strategy of the organization.
  - - - alternate processing facilities that support key operations must be ready, be compatible with the original processing facility :desert:
  - - - resulting dependencies map with threats to and
        vulnerabilities of the components/dependencies
        
        remedial action plan can be developed for establishing the most appropriate
        methods to protect the components.
        
        choice of risk mitigation measures (risk countermeasures)—either to remove the threat and/or fix the vulnerability.
  - - - allowing the organization to decide
        
        technology (and facilities) used for
        protection :fire_engine:
        
        recovery of its key information assets (information system, IT
        components, data, etc.).
  - - - as well as the road map to implement the technology
        and principles.
        
        IT business continuity strategy and its overarching IT strategy are executed, the IT infrastructure of the organization changes.
- - - - for example urgent case of pregnancy deliveries is common for a doctor , critical and much important for business growth if this urgent work done with perfection. and will ultimately achieve business goal.
    - - organization’s overall target for
        recovery :dart:
      - people involved in developing, testing and
        maintaining the plans. :male-doctor::skin-tone-2: :female-doctor::skin-tone-2:
  - - - includes continuity procedures determined necessary to survive and minimize the consequences of business interruption
        
        In addition to the plan for the continuity of operations, BCP includes,
        
        • The DRP that is used to recover a facility rendered inoperable, including relocating operations into a new location
        
        • The restoration plan that is used to return operations to normality whether in a restored or new facility
  - - - • There is proper coordination among various plan components.
      - • Resources committed are used in the most effective way, and there is reasonable that, through its application, the organization will survive a disruption
- - - - Human resources, data, infrastructure elements and other resources (including those provided by third parties) that support the key processes
      - List of potential vulnerabilities—the dangers or threats to the organization
      - Estimated probability of the occurrence of these threats
      - Efficiency and effectiveness of existing risk mitigation controls (risk countermeasures)