DR Plan Final Report_Mohammed Shareef

docx

School

Laikipia University *

*We aren’t endorsed by this school

Course

632

Subject

Information Systems

Date

Nov 24, 2024

Type

docx

Pages

20

Uploaded by peterokhan45

Report
DR Plan Final Report Mohammed Muzamil Sharef Campbellsville University Oct 8, 2023
Disaster Recovery; Equifax Introduction Equifax is a multinational data and analytics enterprise specializing in harvesting, evaluating, and delivering credit data and associated intelligence to organizations and individuals. Considering the confidential character of the data it manipulates, Equifax comprehends the significance of disaster management and has established its own strategy for dealing with calamities. Equifax defines a disaster as an occurrence that severely disturbs its usual procedures, resulting in data loss, systems erasure, or cessation of services to its customers or clients ( Bateman, 2020) . Equifax recognizes the necessity of being ready for such disasters and strives to have preventative measures in place to guarantee the continuation of operations. Equifax adopts a multifaceted methodology to deal with disasters effectively. The organization invests in robust infrastructure and technology to diminish the chance of system malfunctions or data security issues. Equifax boasts a highly dependable and resolute IT framework, boasting multiple data centers throughout distinct sites to guarantee data durability and permanence. This distributed infrastructure lessens the susceptibility of the corporation's operations to localized disasters, such as floods or earthquakes. Equifax places massive emphasis on preparing its workforce for potential disasters. Through regular workshops, exercises and drills, they equip their personnel with the requisite skills and information to successfully manage various emergencies, from cyber-attacks to physical security incursions to natural disasters. Conscious of their staff's pivotal role in surviving crises, the company makes significant investments to enhance their capacity to react and recover.
Besides that, Equifax has formed alliances and pioneered combinations with outside groups to intensify its crisis management abilities. The firm interacts with public administrations, trade unions, and crisis response bodies to build joint disaster reduction and recuperation blueprints. Equifax is actively involved in information exchange projects and works together on peak procedures with different organizations within its sector. By pooling resources and power, Equifax bolsters its robustness against potential calamities ( Hughes, 2022) . An essential part of Equifax's disaster management plan is the all-encompassing disaster retrieval plan. This plan serves as a roadmap for determining the necessary steps to take in the face of disaster to minimize its repercussions on Equifax's operations, clients, and the individuals whose data it holds. The protocol covers all aspects of Equifax's business, encompassing information systems, correspondence networks, and functional processes. Equifax's disaster recovery plan encompasses several essential elements. Firstly, it includes a comprehensive risk assessment to identify potential threats and vulnerabilities. This analysis allows Equifax to prioritize its resources and efforts accordingly. The plan also defines the roles and responsibilities of key stakeholders within the company, ensuring that everyone knows their assigned tasks in the event of a disaster. By clarifying these roles in advance, Equifax can ensure an efficient and coordinated response during a crisis. Equifax's disaster recovery plan also outlines the procedures for data backup, restoration, and system recovery. It specifies the frequency and methods for backing up critical data, ensuring that Equifax can quickly restore its operations and minimize data loss in the aftermath of a disaster. Equifax's data centers have redundant systems and backups distributed across different locations to ensure availability and durability.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Additionally, the plan covers communication protocols, both internally and externally. Equifax recognizes the importance of clear and transparent communication during disasters to avoid confusion and to provide timely updates to stakeholders. The plan includes guidelines for establishing communication channels, setting up crisis communication teams, and ensuring consistent messaging to the public, customers, partners, and regulatory authorities. Equifax also conducts regular testing and exercises to validate the effectiveness of its disaster recovery plan. The company performs simulated disaster scenarios to simulate the response and recovery procedures. These exercises help identify any gaps or weaknesses in the plan and provide an opportunity to refine and improve the response mechanisms. By conducting such tests, Equifax ensures that its plan remains up to date and aligned with the evolving threat landscape. Disaster Recovery Teams & Responsibilities In the face of disastrous circumstances, Equifax Company maintains their emphasis on specialized teams to facilitate the recuperation process, thereby ensuring the restoration of operational functionality for staff. The Disaster Management Team is an indispensable component of Equifax's comprehensive disaster recovery system ( Erickson et al., 2023) . Their core purpose is to plan and orchestrate every element related to responding to and recovering from the calamity. This team takes responsibility for assessing the ramifications of the troubling circumstances and devising an appropriate remedy. They must engage with pertinent stakeholders, including corporate directors, employees, and external partners. During recovery, the Disaster Management Team cooperates closely with the IT division to guarantee prompt
software restoration. Furthermore, they maintain a watchful eye over the IT experts, ensuring that the efforts undertaken complement the all-round recovery scheme. Name Role/Title Work Phone Number Home Phone Number Mobile Phone Number Amreen Ahmed Disaster Management Lead +1 (232) 687 4435 +1 (232) 687 4435 +1 (513) 688 5656 Qayyum Anjum Ass Disaster Management Lead +1 (723) 787 8764 +1 (723) 787 8764 +1 (415) 662 8989 An integral part of the Equifax disaster recovery scheme is the Security Incident Response Team. This team is responsible for managing any cases of cyber security that manifest during or ensue from the catastrophe. The main tasks for this group are to evaluate the magnitude of the security infringement or episode, analyze the source of the incident, figure out the probability of its influence on the corporate infrastructure, and implement applicable procedures to limit harm. Solutions may include disengaging anything touched, deactivating jeopardized accounts, and introducing more rigorous security protocols to preclude further incidents. In collaboration with the Information Technology team, the Security Incident Response Team strives to restore the stability of Equifax's systems and defend employee data. They analyze the system forensically to uncover weak points and offer instructions for boosting the enterprise's safety stance. Furthermore, they partner with external cybersecurity professionals to guarantee a more comprehensive assessment and deter future security breaches. The Operations and Supply Chain Unit is essential in aiding the IT team with their revival attempts. This grouping centers on the practical elements of the retrieval plan, ensuring the availability of the necessary materials to return to ordinary operation for personnel. They oversee
the acquisition and implementation of crucial hardware, software, and alternative materials that are obligatory for supporting the recuperation endeavor. One of the primary responsibilities of the Operations and Supply Chain Unit is to liaison with vendors and suppliers to secure a smooth supply chain. They collaborate closely with these external collaborators to safeguard the necessary tools and to ease its transportation to the recuperation area. This necessitates consistently monitoring and overseeing inventory levels, predetermining needs, and nurturing strong connections with vendors to guarantee quick and dependable deliveries. Name Role/Title Work Phone Number Home Phone Number Mobile Phone Number Sulaiman Khalid Quality Assurance Manager +1 (312) 812 8775 +1 (744) 812 8767 +1 (744) 812 8767 Supriya Sanam Procurement Manager +1 (767) 812 8777 +1 (213) 812 8765 +1 (213) 812 8765 In conjunction with the IT department, the Operations and Supply Chain Unit also evaluates the effects of the calamity on Equifax's physical premises and systems. They assist in recognizing alternative sites or work areas for personnel if the fundamental office is unreachable or impaired. This includes liaising with building maintenance teams to build provisional workspaces and ensuring they have the appropriate technology and resources. Notably, the Operations and Supply Chain Team is pivotal in managing communication between teams internally involved in the recuperation process. They serve as a hub for taking in and delivering knowledge concerning the development of recovery efforts, resource access, or
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
any logistical troubles that could present themselves. They are responsible for ensuring that all teams function seamlessly and have the resources required providing efficient services. Disaster Recovery Call Tree Equifax, one of the foremost consumer credit agencies, handles immense quantities of sensitive financial information. Consequently, the organization requires powerful disaster recovery measures to protect and persist their activities in a calamity ( Park & Yoon, 2022) . A crucial piece of any exhaustive disaster recuperation plan is a call tree. This system is created to optimize communication and coordination actions, assisting Equifax to react quickly and overcome disasters of different intensities. Firstly, disasters can strike unexpectedly, disrupting normal business operations and causing confusion. Having a well-designed call tree can help Equifax promptly initiate its disaster recovery plan, ensuring a swift response. A call tree involves creating a hierarchical list of key personnel or departments within the organization. Each person in the call tree is responsible for contacting specific individuals beneath them, forming a cascading effect. This approach saves crucial time in emergency situations and ensures that the relevant stakeholders are promptly informed about the situation at hand. Additionally, disasters can often result in disruption to communication networks, making it difficult to convey important information across the organization. By implementing a call tree, Equifax can establish redundant communication channels, maximizing the chances of successfully disseminating critical information. For example, if the primary mode of communication, such as email or phone lines, is compromised, the call tree can include alternative methods like SMS, mobile apps, or even physical meetings. This redundancy allows
Equifax to maintain effective communication even in challenging circumstances, minimizing confusion and facilitating a more efficient response to the disaster. Moreover, disasters have the potential to cause widespread panic and chaos among employees, leading to confusion, inefficiency, and a lack of coordination. A call tree can mitigate these challenges by providing a structured and orderly approach for disseminating information and assigning responsibilities. By designating specific individuals responsible for contacting others, Equifax ensures a clear chain of command. This clarity not only helps combat panic but also aids in maintaining productivity and focus during a disruptive event. Each staff member knows their role and to whom they report, allowing for a faster and more cohesive response to the disaster. In addition to internal benefits, a disaster recovery call tree can also facilitate effective communication with external stakeholders, including clients, vendors, and regulatory bodies. Equifax is entrusted with sensitive consumer information, and the ability to swiftly communicate with relevant parties is paramount in times of crisis. By utilizing a call tree, Equifax can promptly reach out to stakeholders, informing them of the situation, mitigation measures being implemented, and any necessary instructions to follow. This proactive communication not only helps to maintain trust and confidence in Equifax but also ensures a smoother recovery process. Contact Office Mobile Home DR Lead Mark Begor +1(773) 663-0230 +1(630) 773-6220 +1(630) 215-62032 DR Lead 1 Mr. Daniel Joshua +1(773) 765-7977 +1(650) 966-3454 +1(650) 887-4410 DR Management Team +1(773) 412-1091 +1(773) 214-8060
Leader Cleophas Mr. Job (Disaster management Response Manager) +1(773) 312-9875 DR Management Team 1 Phil Jones (Assistant Disaster Management Response Manager) +1(314) 221-6503 +1(616) 312-8875 +1(616) 216-5767 IT Department Team Lead Mr. June (Head of IT operations) +1(469) 995-6153 +1(817) 899-6627 +1(817) 899-6627 IT Department Team 1 John paul (Assistant Head of IT operations) +1(773) 556-7899 +1(430) 258-5284 +1(430) 258-5284 Database Team Lead James Boer (Database manager) +1(314) 440-6530 +1(773) 807-8960 +1(773) 807-8960 Database Team Lead 1 Mr. Bond (Assistant database manager) +1(469)775-5432 +1(440)514-1198 +1(440) 514-1198 A disaster recovery call tree serves as a valuable documentation and evaluation tool. Creating a call tree requires Equifax to identify and organize the key personnel and departments critical to the recovery process. This exercise can unveil any gaps or inefficiencies in the existing structure, allowing Equifax to course-correct and improve its disaster response capabilities.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Additionally, through regular updates and drills, the call tree can be adapted, refined, and documented to accommodate changes in personnel, roles, or contact information. Thus, a call tree acts not only as an operational resource but also as a reminder and reference point for ongoing disaster preparedness ( Hakkim & Deb, 2022) . Recovery Facilities Equifax, one of the world's leading credit reporting services, fully grasps the critical value of disaster recovery facilities to ensure that their operations run without hitch in the face of unexpected circumstances. To this end, Equifax created many disaster recovery facilities that are integral to their catastrophe resilience plan, aiding them to quickly regain and revitalize key services both during and after an emergency ( Stern & Nussbaum, 2022) . One of the key disaster recovery locations within Equifax is its data center. Equifax runs a network of firmly protected
data centers scattered across various locales. These data centers, store extensive amounts of confidential data, including credit information from millions of customers. These data centers are supported by redundant systems and reinforcement mechanisms, ensuring both the accessibility and safety of the data in the event of a crisis. Equifax also utilizes hot sites as a disaster recovery facility. A hot site is essentially a duplicate of their primary data center, equipped with all the necessary resources and infrastructure to take over operations in the event of a disaster. These hot sites are continuously synchronized with the primary data center to ensure real-time data replication. In the event of a disaster, the hot site can seamlessly take over and provide uninterrupted services to customers, ensuring minimal disruption. Another important disaster recovery facility within Equifax is their cold site. Unlike hot sites, cold sites do not have real-time data synchronization with the primary data center. Instead, they are pre-configured with the necessary infrastructure and equipment to restore operations quickly after a disaster. Although cold sites may require additional downtime for data restoration, they are a cost-effective solution for disaster recovery as they provide essential resources without the need for continuous synchronization. Equifax also employs a strategic approach to create geographically dispersed disaster recovery facilities. By having multiple recovery sites located in diverse geographical regions, the company can mitigate the risk of a single localized disaster affecting all their operations simultaneously. This approach ensures redundancy and enables Equifax to recover critical functions and services quickly, regardless of the location of the incident. Equifax's disaster recovery facilities are further supported by robust business continuity plans. These plans outline specific procedures and protocols to be followed during a disaster ( Seaman & Gioia, 2023) . They
include detailed instructions for the activation and utilization of various recovery facilities, ensuring a coordinated response and seamless transition to alternative operational sites. Communicating During a Disaster Disaster communication teams are of paramount importance within the Equifax Company, tasked with ameliorating the outcomes of a crisis. By communicating with all stakeholders, personnel, and the public in a timely and unified manner, this team helps to limit the losses associated with a disaster. Equifax is a world-renowned data solutions provider responsible for safeguarding invaluable consumer information. It faces various threats, such as cybercrime, natural disasters, and operational failures. As a precaution, Equifax has set up an elite disaster communication team of experts from diverse fields, such as PR, corporate communications, jurisprudence, and cybersecurity. The principal responsibility of the disaster communication team in Equifax is to provide precise and rapid information to internal and external stakeholders during a calamity. Internally, these groups guarantee that personnel are well-informed about the circumstances, the company's response plan, and any essential measures they must perform. This assists in creating a feeling of safety and security amongst staff while ensuring they have unambiguous instructions to pursue. To illustrate, in a cyber-attack, the communication team may have to reveal to staff potential data infringements and supply commands on how to shelter private data. Externally, disaster communication units at Equifax are accountable for controlling the business's prestige and upholding transparency with consumers, stakeholders, monitors, and the populace at large. Amidst a crisis, these entities hastily review the scenario, form essential communications, and broadcast news through multitudinous media. The aspiration is to reassure
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
involved parties that Equifax is taking applicable steps to confront the tragedy and provide accurate updates on the completed advance. Successful communication helps decrease ambiguity and hinders erroneous information from dispersing, which can further agitate the repercussions of a disaster. Moreover, the disaster communication teams at Equifax serve as intermediaries between the company and other external bodies such as emergency responders, government agencies and news outlets. With such organizations, the teams guarantee that the pertinent data reaches the relevant channels whilst facilitating a collective effort to overcome the calamity. This cooperation can be essential in situations like natural events when the company necessitates outside aid. Disaster communication teams carry out regular training drills to ensure Equifax is prepared for emergencies. By replicating diverse potential scenarios, these teams can uncover any absences in the response plan, amend communication techniques and raise the overall coordination. Communicating with Employees and Vendors: As a consequence of a disaster, prompt and efficient communication is key to limit the severity of the effects and secure the organization’s ability to continue business operations. This is especially so for Equifax, a leading credit information and risk management solutions provider. The need to communicate with vendors and employees during a natural disaster cannot be underestimated, as it is integral in containing the consequences, reinforcing customer trust and facilitating recovery. Open and transparent communication with vendors is critical to address conceivable interferences in the delivery network. Equifax depends on a system of suppliers for different
types of support, for example, information stockpiling, IT foundation, and help frameworks. In the event of a disaster, for example, a cyber-attack or a regular disaster, these suppliers can be straightforwardly influenced, prompting a progressive effect on Equifax's activities. By instantly imparting the circumstance and cooperatively taking a shot at the difficulties, Equifax can guarantee that elective courses of action are made, diminishing the obstruction to their administrations and keeping up business congruity. This could incorporate looking for replacement providers or building brief solutions until complete activities can be reestablished. Company Name Point of Contact Phone Number E-mail Datastream John Smith; Director of Data Partnerships +1(223) 231-6503 smith@gmail.com Experian Sarah Johnson; Account Manager +1(216) 358-3284 johnson@gmail.com TransUnion David Brown; Sales Executive +1(246) 334-5744 david@gmail.com Communication during a disaster is Crucial for employees' safety, well-being and engagement. Employees form the foundation of any organization, and their assistance is critical at such difficult times. Keeping them abreast of the circumstances, dangers, and protective measures not only safeguards them but also shows belief in the organization’s leadership. Regular accounts on the revival operations, growth and probability for adjustments in their roles aid in managing expectations and bring comfort in times of doubt. Moreover, open conversations enable workers to put forward their worries, tips and responses, fostering a feeling of participation and consensus, which is mandatory for the upkeep of efficacy and morale in a disaster.
Furthermore, competent communication is indispensable in curbing the reputational risks associated with a disaster. Equifax's core business necessitates handling delicate customer data, thus rendering it especially susceptible to reputational damage in case of a breach or disruption. By dealing with the scenario, notifying customers regarding the occurrence, and laying out the steps taken to safeguard their data, Equifax can author and upkeep faith, subduing potential reputational harm. Transparent and accurate discourse can work wonders in sustaining customer allegiance, ultimately benefiting the company's recuperation and its capability to regain from the disaster. Activating the Disaster Recovery Plan In September 2017, a considerable cyberattack happened at Equifax, one of the most extensive credit reporting agencies in the United States. This infringement jeopardized the personal data of over 147 million people, making it one of the most noteworthy data breaches in history. In reaction to this disaster, Equifax was required to start its Disaster Recovery Plan (DRP) to lessen the harm and bring back standard activities. The extremity of activating the Disaster Recovery Plan at Equifax cannot be overestimated. This allowed them to respond punctually and efficiently to the hacking attack. The DRP proposed an evident roadmap on how to process the dilemma, making sure that every imperative step was done to safeguard patrons' information and lessen the repercussions of the unauthorized gain. This included actions such as cutting off compromised systems, discontinuing impaired computers, and taking extra protection protocols to thwart extra illegal access. By utilizing the DRP, Equifax had the opportunity to judiciously allocate personnel and proficiency to combat the hack, curtailing the possible damage caused by the cyberattack.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
By implementing its Disaster Recovery Plan (DRP), Equifax conveyed to its customers, associates, and stakeholders that the privacy and security of their data was its primary concern. The activation of the DRP unmistakably demonstrated their willingness to protect their technology and facts against all eventualities. This was extremely important in sustaining the public's faith in the company and ensuring it could securely manage sensitive data. The commencement of the DRP unequivocally revealed that Equifax regarded the breach as a matter of great importance and was vigorously striving to rectify it and impede similar incidences in the future. The DRP enabled Equifax to restart their operations without delay. Data breaches can result in dramatic economic repercussions, from legal action and regulatory penalties to public perception and market share losses. Acting quickly to activate the DRP minimized downtime and ensured that vital services they needed to carry on business were again accessible. This enabled the company to continue giving services to its customers and avoid any erosion of their place in the industry. Restoring IT Functionality Equifax Corporation, a major global credit reporting organization, holds sensitive information regarding individuals' fiscal circumstances. Therefore, any significant technical breakdown during a crisis could cause far-reaching and long-lasting repercussions, not merely for the firm itself but also societies around the world and the lives of countless individuals. Therefore, restoring Equifax's IT functionality is crucial to help mitigate the impacts of a disaster. Equifax's ability to restore its IT functionality swiftly is essential in ensuring the continuity of operations. During a disaster, various services such as credit reports, fraud
detection, and identity verification heavily rely on Equifax's IT systems. Disruptions or delays in these services can have immediate and noticeable impacts, leading to potential financial losses for individuals and businesses. By restoring IT functionality, Equifax can quickly resume providing these critical services, minimizing the negative impact on the financial ecosystem and allowing for business and economic activities to recover. Moreover, Equifax's IT systems play a vital role in safeguarding personal information. With the increasing prevalence of cyber threats, disaster-induced disruptions can create vulnerabilities that malicious actors may exploit. Restoring IT functionality promptly is necessary to mitigate the risk of data breaches, identity theft, or fraudulent activities. Equifax needs to activate its security protocols and fortify its IT infrastructure to prevent potential breaches that could cause severe harm to individuals and undermine public trust in the company. Swift restoration of IT functionality would help preserve the security and integrity of the information stored within Equifax's systems. Furthermore, Equifax's reputation and credibility are at stake during a disaster. Timely restoring IT functionality demonstrates the company's commitment to its customers and stakeholders, signaling its ability to overcome challenges and protect their interests. Equifax's customers, which include financial institutions, lenders, and businesses, rely on its services to make informed decisions. Any prolonged disruption in IT functionality can lead to a loss of confidence, potentially resulting in customers seeking alternative credit reporting agencies. By restoring IT functionality promptly, Equifax can demonstrate its dedication to providing reliable and uninterrupted services, maintaining customer loyalty, and preserving its reputation in the industry.
Plain Testing & Maintenance Disaster recovery planning is imperative for any organization to guarantee business continuity in light of unforeseen occurrences or disasters. Notwithstanding, it isn't enough to produce a disaster recovery plan and afterwards forget about it. Habitual updates and testing through walkthroughs are critical to guarantee that the plan stays viable and will have the option to address the organization's needs when a disaster strikes. The frequent evolution of technology and alteration of the business climate calls for regular refreshing of the catastrophe backup strategy. Technical progress is unremitting, and the establishment may adopt new methods or mechanisms. Such transformations can have a major effect on restoring function and necessitate strategy changes. Moreover, as the business landscape changes, the prioritization and indispensable structures of the organization could grow. To guarantee that the most meaningful possessions of the organization are adequately shielded, periodic revamps of the plan are essential to conform to these transformations. Execution of the disaster recovery scheme allows companies to specify potential flaws or omissions in the plan. Testing distinct disaster situations and strolling through the succession of the recovery process allows businesses to single out areas that could use augmentation or may not be sufficiently incorporated into the plan. This could range from obsolete contact details for vital personnel to means matters that could impede recovery. By differentiating these imperfections with walkthroughs, organizations can address them before a genuine disaster happens, ensuring a smoother and more efficient retrieval. Periodic walkthroughs of the disaster recovery plan are necessary to acquaint essential personnel with their tasks and obligations in case of a calamity. Amid a catastrophe,
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
pandemonium and disarray can frequently happen. By consistently carrying out walkthroughs, companies can guarantee that vital staff are apprised of the plan, understand their defined duties and obligations, and are set to respond when needed. This not only supports optimizing the recovery effort but also brings trust and diminishes dread among workers.
References Bateman, J. (2020). War, terrorism, and catastrophe in cyber insurance: Understanding and reforming exclusions . Carnegie Endowment for International Peace.. DeNardis, L., Cogburn, D., Levinson, N. S., & Musiani, F. (Eds.). (2020). Researching internet governance: Methods, frameworks, futures . MIT Press. Erickson, S. L., Stone, M., Serdar, G., & Pfeffer, B. (2023). When Crisis Victims Are Not Customers: SCCT and the Equifax Data Breach. Journal of Managerial Issues , 35 (2). Hakkim, A., & Deb, A. (2022). Religious meaning-making and prosocial action among disaster response volunteers. Mental Health, Religion & Culture , 25 (7), 712-734. Hughes, S. D. (2022). Managing Risk: A Hermeneutic Phenomenology on the Experiences of Corporate Instructors When Planning and Developing Disaster Driven Training Content. Park, E. S., & Yoon, D. K. (2022). The value of NGOs in disaster management and governance in South Korea and Japan. International Journal of Disaster Risk Reduction , 69 , 102739. Seaman, J., & Gioia, M. (2023). Security Risk Management-The Driving Force for Operational Resilience: The Firefighting Paradox . CRC Press. Stern, E., & Nussbaum, B. (2022). Critical Infrastructure Disruption and Crisis Management. In Oxford Research Encyclopedia of Politics .