During the next week, the country's electricity demands will go unmet because of a shutdown at the local power plant. Devastated Explain why it was necessary to use business continuity plans in each scenario. deleted by a disgruntled worker from a server Covid-19 containment measures need the company to maintain a minimal workforce for many months. The computers and other IT equipment in the business were inundated as firefighters put out the fire. A critical server closet was broken into overnight.

During the next week, the country's electricity demands will go unmet because of a shutdown at the local power plant. Devastated Explain why it was necessary to use business continuity plans in each scenario. deleted by a disgruntled worker from a server Covid-19 containment measures need the company to maintain a minimal workforce for many months. The computers and other IT equipment in the business were inundated as firefighters put out the fire. A critical server closet was broken into overnight.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter11: Security Maintenance

Section: Chapter Questions

Problem 1DQ

See similar textbooks

Similar questions

Then, suppose you get a position as an IT architect at a new organization. The company's CEO instructed your team to develop a contingency plan in the case of a calamity. They have adequate resources to complete the task, but they do not want to exceed their budget, thus they are unwilling to do so. What would your department say about the CEO's safety net?
Overview • For the following questions, consider the questions in the context of an end user places a call to the helpdesk and indicates that they are unable to print a photograph on a networked printer. 4. Consider the eight problem-solving strategies described in Chapter 4. For each of them, give a short explanation of why it would or would not be useful for this situation
Susan is the lead investigator for a security incident and realizes that she will not be able to complete her investigation without causing severe disruption to the business. The action she feels she must take exceedsthe authority granted to her under the incident response plan. What should Susan do? a)Shut down all business operations immediately until she develops a plan b)Take the action immediately to protect the business c)Discount the action as a possibility because it exceeds her authority d)Consult with higher levels of management
Scenario: CyberHealth Ltd. is a Teesside based cybersecurity solution provider, where you are working as a cybersecurity expert. Your company provides Networking & Cybersecurity solutions for the business environment. They currently offer managed, professional, and hardware & software services. Recently, few companies have approached CyberHealth to offer them services for their IoT solution clients. CyberHealth is interested in extending its business by providing services to its customers who offer IoT solutions. The use of telemedicine with the support IoT has increased globally due to COVID-19. Your company is more interested in healthcare related IoT solution providers or customers. In this context, you are assigned to analyse the security of an existing remote monitoring system (offered by an IoT solution provider) for elderly and chronic disease patients. Q1. Discuss the three- and five-layered architecture of the IoT-based remote patient monitoring system (e.g.,…
Security breaches in information systems are very commonplace these days even though some organizations have what they believe is good security controls. Because of their vulnerability to threats from hackers, internal personnel, and poor management of Hardware and software devices, security controls always need revisiting.From my perspective as manager of the Accounts and Finance department, every security breach affects this department even if it is just down time to be at meetings, to discuss strategies and costs to repair damages. When the breaches occur, unauthorized access is gained to either, do something malicious to the organization's resources to steal or sabotage data for financial gain.This usually results in the company's reputation/integrity being damaged, Loss of revenue during downtime, high costs to repair and restructure. legal ramifications are expected as well if guilty persons are found or if customers decide to sew for breach of contract and losses.Two Reasons…
Assume you work for a company in Oklahoma with eight locations spread across the state. The company has never been impacted by a natural disaster or a cyberattack. The IT manager meets with the company president to explain the business continuity plan she is preparing. The president does not believe the company needs a BCP and does not want the time or expense spent on the project.(a) Do you believe a BCP is necessary in this situation? Why or why not?(b) What is the worst-case scenario if the company does not have a BCP in place?
a Cybersecurity expert has determined ICS vulnerability would destroy 50 percent of the process asset that is valued $10,000,000. The vulnerability has the projected occurrence of once every 4 years. The mitigation control for the ICS vulnerability is $5,500,000 with annual maintenance cost of $300,000. What is your recommended way forward in addressing the vulnerability?
solve the questions: Tony and his team identified some risks during the first month of the Recreation and Wellness Intranet Project. However, all they did was document the risks in a list. They never ranked the risks or developed any response strategies. Because the project has had several problems, such as key team members leaving the company, users being uncooperative, and team members not providing good status information. Tony has decided to be more proactive in managing risks. He also wants to address positive risks as well as negative risks. the quation is : 1- Plot the six risks on a probability/impact matrix. 2- assign a numeric value for the probability and impact of each risk on meeting the main project objective.
When a large city in the United States found out that 70 percent of its IT workers may retire over the next three years, it moved quickly to hire young IT specialists and couple them with seasoned veterans. Since practically all of their IT systems were developed in-house over a period of 20 years, in-house expertise was essential, and the market lacked candidates with the necessary understanding. Is this a hint that more work needs to be done on crisis management and backup plans? Surely there was a previous paper or strategy that should have dealt with this problem.
Anna Marie Corporation is developing a revised business continuity plan and disaster recovery plan for its headquarters facility and network of 16 branch offices. The said plans have not been updated in more than eight (8) years, during which time the organization has grown by over 300%. At the headquarters facility, there are approximately 750 employees. These individuals connect over a local area network (LAN) to an array of more than 60 applications, databases, and file print servers in the corporate data center and over a frame relay network to the branch offices. Traveling users access corporate systems remotely by connecting over the internet using a virtual private network (VPN). Users at both the headquarters and branch offices access the internet through a firewall and proxy server located in the data center. Critical applications have a recovery time objective (RTO) of between three (3) and five (5) days. Branch offices are located between 30 and 50 miles from one another,…
John just finished his inspection coordinator course. After obtaining his first appointment, he plans to add his personal secretary to the inspection team for the purpose of serving as a session scribe and producing the required reports. He assumes that her participation will free him of the coordination tasks and enable him to conduct the session successfully. Is it advisable to employ a secretary (a non-information technology professional) as a scribe in an inspection session? List the pros and cons of adding such a nonprofessional to the inspection session.
A senior manager in a company is concerned about insider attacks from disaffected staff on the company's IT assets. As part of a resilience improvement program, she proposes that a logging system and data analysis software be introduced to capture and analyze all employee actions but that employees should not be told about this system. Discuss the ethics of both introducing a logging system and doing so without telling system users.