1. Lecture5 : Contingency planning Lecturer: Kawther Abas 25/12/1435 447CS – Management of Programming Projects

2. Incident response planning (IRP) Disaster recovery planning (DRP) Business continuity planning (BCP) Fundamentals of Contingency Planning Management of Information Security, 3rd ed.

3. contingency planners should –Identify –Anticipate –Select –Implement –Test Fundamentals of Contingency Planning

4. Develop the contingency planning policy statement Conduct the BIA Identify preventive controls Develop recovery strategies Develop an IT contingency plan Plan testing, training, and exercises Plan maintenance

5. Elements of a contingency planning policy statement 1-An introductory statement of philosophical perspective by senior management 2- A statement of the scope and purpose of the CP operations 3- A call for periodic risk assessment and business impact analysis by the CP Team

6. Four teams on contingency planning : 1.The CP team 2.The incident recovery (IR) team 3.The disaster recovery (DR) team 4.The business continuity plan (BC) team

7. The CP team should include –Champion –Project Manager –Team Members Business managers Information technology managers Information security managers

8. Components of Contingency Planning

9. Sources of Disaster Nature / Technology / Organization / People AccidentalMalicious Fire / Lightning / Smoke Earthquake / Tornado / Flood Building Collapse Strikes / Industrial Actions War / Invasion Hardware / Software Problems Loss of plant / systems / services / data “availability”