5.2 [B] - disaster and recovery - Organisational policies ( (Scale of…
5.2 [B] - disaster and recovery - Organisational policies
5.2.3 Disaster and recovery planning task:
Organisations need to be aware of all the issues which could risk their assets, employees and existence.
What should be included in the plan to protect their data?
They should have a regular backup after every day. They should store IT equipment on the second floor of a building instead of the first to prevent water damage in an area prone to flooding.
Change management is a structured approach to moving an organisation from the current state to the desired future state.
What should be included in their plans to ensure the business can continue to do business?
The company can have backup generators in events of power cuts to ensure power is on the whole time. Also regular backups must be made so no work is lost to carry on working efficiently.
Find a real life news story where a business had inadequate disaster recovery plans which affected the business. What could have been done differently?
In 2013, lightning struck an office building in Mount Pleasant, South Carolina, causing a fire to break out. The offices were home to Cantey Technology, an IT company that hosts servers for more than 200 clients.
The fire torched Cantey’s network infrastructure, melting cables and burning its computer hardware.
This is a policy to keep a dress code that requires employees to wear the uniform provided including PPE.
Acceptable use policy
important document which governs students’ use of the internet at school and covers a wide range of issues surrounding the rights, responsibilities and privileges – as well as sanctions
Device use policy
devices and related software for network and data access will, without exception, use secure data management procedures. All mobile devices must be protected by a strong password.
Internet use policy
An internet usage policy provides employees with rules and guidelines about the appropriate use of company equipment, network and Internet access. -
disciplinary policy is a policy of misconduct are managed and dealt with in a fair and consistent manner. The Trust promotes high standards of behaviour and conduct for all employees and takes appropriate corrective action where those standards are not met. - treating issues with no bias
Workplace safety policy
This is a policy where there are restrictions/rules in place to ensure your safety. An example of this is where there is a maximum weight limit of 25kg on boxes. If it's over 25kg it should have a label on it requiring more than one person to lift the box. This is to ensure the safety of the employee to not result in any injury e.g. back pain.
Fair pay policy
Making sure both genders are paid the same for working the same job at the same standard.
Reduces the likelihood of things going wrong in the development. Creates a clear log of changes / improvements made Formalises a process / sets clear rules for changes.
Can be difficult to implement successfully Needs everyone to follow the process Can introduce complexity in different business practices.
Scale of change - drivers
New laws / legislation which require the business to make changes to comply
Competition (rival organisations) which are gaining popularity.
All of these changes are due to business drivers.
Scale of change - needs
Replacing a slow network with fast fibre optic
Introducing extranet to allow employees to work from home.
Introducing extranet to allow customers to access parts of the system
All of these changes are due to the business needs and growth