1. Disaster Response Management By: Michael Blasic COSC 481

2. Overview Disaster Recovery When incidents become disasters Disaster classification How to plan for a disaster

3. Disaster Recovery What is disaster recovery planning? –Entails the preparation for and recovery from a disaster, whether natural or human-made

4. Incidents Become Disasters When According to the Contingency planning team incidents become disasters when –The organization is unable to contain or control the impact of an incident –The level of damage or destruction from an incident is so severe that the organization cannot recover from it.

5. Disaster Classification Disaster Response Plan (DRP) classify’s disasters –Natural disasters –Human-made disasters –Disasters based on the speed of development

6. Natural Disasters Fire –Mitigated with fire casualty insurance or business interruption insurance. Flood –Mitigated with flood insurance or business interruption insurance Earthquake –Can sometimes be mitigated with specific casualty insurance or business interruption insurance Lightning –Mitigated with multipurpose casualty insurance

7. Natural disasters cont Landslide or mudslide –Sometimes mitigated with casualty insurance or business interruption insurance Tornado or severe windstorm –Sometimes mitigated with casualty insurance or business interruption insurance Hurricane or typhoon –Sometimes mitigated with casualty insurance or business interruption insurance

8. Natural disasters cont Tsunami –Sometimes mitigated with casualty insurance or business interruption insurance Electronic discharge (ESD) –Not usually an insurable loss unless covered by business interruption insurance Dust contamination

9. Human-made disasters Cyber-terrorism –Ex. Kevin Mitnick broke into Digital Equipment Corporation’s computer system and stole operating system software in 1979. Acts of war –EX. September 11, 2001 attacks on the World Trade Center & the Pentagon

10. Disasters Based on Speed of Development Rapid-onset disasters –Occur suddenly, with little warning, taking the lives of people and destroying the means of production Ex. Earthquakes, floods, storm winds, tornadoes, & mud flows

11. Disasters Based on Speed of Development cont Slow-onset disasters –Occur over time and slowly degrade the capacity of an organization to withstand their effects. Ex. Droughts, famines, environmental degradation, desertification, deforestation, & pest infestation

12. Planning for Disaster Six Key Points 1. Clear delegation of roles and responsibilities: 2. Execution of the alert roster and notification of key personnel 2. Execution of the alert roster and notification of key personnel

13. Key Points cont 3. Clear establishment of priorities 4. Documentation of the disaster

14. Key Points cont 5. Inclusion of action steps to mitigate the impact of the disaster on the operations of the organization. 6. Inclusion of alternative implementations for the various systems components, should primary versions be unavailable

15. Information Employees Should Carry with Them all the Time 1 st card contains personal emergency information. 2 nd card contains a set of instructions on what to do in the event of an emergency 2 nd card contains a set of instructions on what to do in the event of an emergency

16. Conclusion Is any disaster response plan completely by the book?

17. Sources Mattord, H., Whitman, M.(2004). Management of Information Security. Canada: Thomson Learning.