Developing Contingency Strategies for Information System, Lecture notes of Accounting

Download Developing Contingency Strategies for Information System and more Lecture notes Accounting in PDF only on Docsity!

Running head: Developing Contingency Strategies Developing Contingency Strategies for Information System Grand Canyon University: ITT - 430

Lopes Manufacturing will conduct a Business Impact Analysis (BIA) which will focus on potential effects of safety, financial, regulations, and legal activities. These strategies will impact differently and will determine the business-critical safety and activities. This will benefit Lopes Manufacturing to ensure that all operations are well during disturbances that may occur. Lopes Manufacturing will use BIA to prevent loss of customer data and the importance to protect is the information it holds. To be different from other companies, one must value their clients and their information, by securing and protecting the information of their clients; it will build trust between the two. The benefits of having trust will bring a positive impact and clients will reference Lopes Manufacturing for how well they handle their client’s personal information. Securing customer’s data will increase the customer’s relationship and hoping to bring positivity within the business.

Business Impact Analysis

Customer Database Loss of client information will bring about a substantial loss of clients Apologizing to client, redressing, and promising/sanctioning more made sure about information bases Employee Database Loss of Employees and claims Apologizing to client, redressing, and promising/sanctioning more made sure about information bases Laptops Misfortune clients and reports Enforce strict regulations on device Desktops Misfortune clients and reports Enforce strict regulations on device Cellphones Misfortune clients and reports Enforce strict regulations on device Printers Uncommon information breaks or ransomware Minimizing access through hardware to network Windows 10 Unable to operate Update the windows or reinstall again Websites Fraud Websites Restrict sites MS Office Unable to operate Firewall Less proficient to representatives/clients Substitute or troubleshoot Anti-Malware Less proficient to representatives/clients Substitute or troubleshoot Operating System Less efficient to employees/customers Use alternative solution Business Solutions Less efficient to employees/customers Use alternative solution Web Server Online Business will be misfortune Zero in on reestablishing worker

The roles that are important in CISO would be handling any natural, environmental, and personal threats that may occur. CISO will delegate on the recovery plan and informing Lopes Manufacturing of any incidents that may be malicious. Within Lopes Manufacturing, all employees must report to their supervisors any incidents that could be a threat to the company. If any threats may occur, one must report to CISO and start the recovery plan as soon as possible. HR will notify employees about any incident relations or data that has been compromised. 3 Reporting Guidelines Employees must report an incident and it will be a major role for the CISO. The guidance of reporting an incident will be done in a correct and safe way. Once the incident is identified, it will go through physical and auditory contact with the department supervisor or to the CISO team. The CISO will report and detail what the employee has found. Where they found the incident, which network it was on, and what information was vulnerable on the network. After reporting the incident, CISO will go into depth and create a solution and recover what was lost. 4 Workflow Diagram

5 Six Stages Preparation –Lopes Manufacturing must-have preparation for the other stages of an incident, by trying to reduce any data breaches for manufacturing to continue producing products. To prepare for an incident, the company must have security installed on all the networks and operating systems. Identification – Identifying the incident is the next stage to be able to determine where the breach happened and what was stolen in the database. Lopes Manufacturing will have to minimize the incident to prevent it from repeating itself and prioritizing the focus resources in the database.

Lopes Manufacturing will have the purpose of protecting customer's information, incase of any disaster that may occur. Setting up a disaster recovery plan to help prevent any errors that will cause a disaster within the company. This is one of Lopes Manufacturing proactive strategies and their plan is ready in case of a disaster happens.

2. Scope The scope of the disaster recovery plan will have Lopes Manufacturing in a functional state in case of a disaster happens. The plan will protect the important areas of the company, which will be customer data, employee data, and manufactures.
3. Roles and Responsibilities The CISO will share duty in the calamity recuperation plan and will hold it in line with the arrangement. This will permit them to evaluate and recuperate from the occurrence and ready to part the functions inside the gathering to recuperate any lost information from the calamity.
4. Resource Requirements The CISO will have specialized help and the security group will deal with the removal and will set a few needs to both departments given for the episode.
5. Training Requirements Technical support and Security group will have adequate preparation in a fiasco recuperation, which will permit them to help the CISO permitting them to determine the catastrophe and recuperate at the earliest opportunity.
6. Exercise and Testing Schedules The Disaster Recovery Plan will consolidate with IRP into a similar timetable to run a test and exercise so they can guarantee that these weaknesses will be fixed. The testing will

happen each Monday, consecutive. This will permit the security group to devote time every week to keep frameworks refreshed and arranged.

7. Plan Maintenance Schedules Support timetables will occur at each Friday after work hours and the framework will be set to 4PM to keep up and checked for any slip-ups or any endeavored penetrates.

Business Continuity Plan

Lopes Manufacturing will utilize a warm site technique to have the option to work in case of the framework going down or being inoperable. This is significant for Lopes Manufacturing to create an assembling item because the framework should workday and night as the customers are calling day by day and utilizing the organization's site to have the option to buy our items, dispatching the items, and so on A virus site won't let administrators draw in with customers except if it is earnest, by making arrangements, the organization will utilize office space for gatherings where chiefs and chiefs need to examine with customers about their items. If there should be an occurrence of a catastrophe the business progression plan will be sanctioned utilizing a hot site and the hot site will be utilized in the resource recuperation. The CISO and Security group will be working relentlessly during the hot site is being utilized to recuperate the resources that were gone and to recuperate whatever they can get from basic frameworks. Restoring workers should begin from the earliest starting point of business activity and permitting sites to go online again and setting up the organization in the business hot website. If the webserver is old, it will be supplanted with another model and the customers will have another record and the data will be retaken. On the off chance that the occurrence was more awful, for example, a size, it will take three to a half year in the hot site to make another