Title: Module 6 Introduction
Course: CET 2660 Network Security Fundamentals > Section: Module Six - Business Continuity

Introduction

September 11, 2001 demonstrated that although high impact, low probability events could occur, recovery is possible. Even though buildings were destroyed and blocks of Manhattan were affected, businesses and institutions with good continuity plans survived.

In March 2011, an earthquake registering 9.0 on the Richter scale struck 230 miles northeast of Tokyo off the coast of Japan. The tsunami crated a 30 foot wall of water that engulfed entire towns, with some waves reaching six miles inland. Most of large-scale Japanese organizations had extensive disaster recovery plans in place that were immediately enacted to ensure that the business could continue to function.

In this module we will learn about the critical importance of keeping an organization operational in the face of disasters. Next we will learn how organization can establish and maintain security in the face of risk. We will study security policies and the different types of policies that are used to reduce risk. We will learn the importance of training and awareness programs can help provide the user with the tools to maintain a secure environment within the organization.

Objectives

Upon completion of this module, the student will be able to:

Define environmental controls
Describe the components of redundancy planning
List disaster recovery procedures
Describe incident response procedures

Explain how to control risk
List the types of security policies
Describe how awareness and training can provide increased security

Readings & Resources

Chapter 13: Business Continuity p. 488-515
Chapter 14: Risk Mitigation p. 534-556