轻哼了——因为网络入侵检测系统Snort - Lightweight Intrusion Detection for Networks.pptVIP

Illusions of Business Continuity Planning S.C. Leung CISSP, CISAChairperson, PISA What is BCP for? Business Continuity Planning Advanced planning and arrangements to insure continuity of critical functions of an organization Preparations and Procedure sufficient for responding to a disaster Incident Response as first step to respond to a disaster What is the No.1 Priority ? No.1 Priority of Disaster Response “Personnel Life” In all case, do not expose employees to risk. Risk is greatest in Evacuation BC Management Team BC Coordinators BC Management : Recovery Major Plan Components Lessons from WTC Bomb Attack 1993 Out of 350 companies that operated in the WTC prior to bombing in 1993, 150 were out of business a year later Business Continuity Plan is vital ! Importance of BCP ratified Where the pain had been felt … BCP Objectives defined BCP Management Team formed BCP Coordinators nominated BCP Procedure developed BCP Drill Tests performed BCP Resources budgeted Risks mitigated and contained to a large extent! Lessons from WTC Attack 2001 By Richard Corcoran, Manager, Global Business Continuity, Eastman Kodak Company /article_index.cfm?article=393  Human Factors of BCP Significant trauma and stress on personnel, progressively getting worse with each day – MORALE Companies are not prepared to lose critical recovery team personnel – Key Assumptions for BCP to work DR Planning Flaws Companies seriously under-estimated how long it would take to recover. Some of this was attributed to loss of staff. Few customers had workstation recovery plans for their end users Budget in DR need to be increased from 3.5% to 6% of IT budget. (Financial sector ? up to 12%-15% is required!) DR Drill Test Insufficiencies Problems in Data Synchronization and links to feeding and dependent systems -- companies did not thoroughly test these interfaces There should have been more testing with end users. DR Maintenance Flaws It is very hard to get technical tea