Chapter 10, Problem 2E

Explanation of Solution

Review of SP 800-34 document:

The special publication “SP 800-34, Contingency Planning Guide for Information Technology Systems, June 2002” includes the directions that are essential for expressing a plan for the different types of disasters, events and different circumstances which are needed in the business continuity.

The NIST method that has been used in the special publication SP 800-34 describes a procedure which contains seven steps are as follows:

• Development of the statements regarding the business continuity planning policies
  • The formal organizational policy must provide direction and power to the development of an efficient Business Continuity Plan (BCP).
• Review of the BIA:
  • The help of the Business Improvement Area (BIA) is needed for the identification and prioritization of the important IT systems and different components.
• Prevention controls have to be identified:
  • Numerous approaches that are carried out for the reduction of the penalties of the system concern will eventually raise the availability of the system and will also result in reducing the life cycle cost...