<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:creativeCommons="http://backend.userland.com/creativeCommonsRssModule">

<channel>
	<title>Security Ripcord &#187; Business Continuity</title>
	<atom:link href="http://www.cutawaysecurity.com/blog/archives/category/business-continuity/feed" rel="self" type="application/rss+xml" />
	<link>http://www.cutawaysecurity.com/blog</link>
	<description>Cutaway's Observations, Opinions, Rants, Raves, Tantrums, and Tirades</description>
	<lastBuildDate>Tue, 01 Jun 2010 15:17:09 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<creativeCommons:license>http://creativecommons.org/licenses/by-nc-sa/3.0/</creativeCommons:license>		<item>
		<title>Incident Response and Distaster Recovery Plan SDLC</title>
		<link>http://www.cutawaysecurity.com/blog/archives/320</link>
		<comments>http://www.cutawaysecurity.com/blog/archives/320#comments</comments>
		<pubDate>Thu, 11 Sep 2008 03:59:45 +0000</pubDate>
		<dc:creator>cutaway</dc:creator>
				<category><![CDATA[Business Continuity]]></category>
		<category><![CDATA[Disaster Recovery]]></category>
		<category><![CDATA[Incident Response]]></category>
		<category><![CDATA[SCRUM]]></category>

		<guid isPermaLink="false">http://www.cutawaysecurity.com/blog/?p=320</guid>
		<description><![CDATA[There, I said it.  If you are developing an Incident Response Plan, Business Continuity Plan, Disaster Recovery Plan, or any other important plan for that matter, you should consider utilizing some type of development life cycle.  In the title I refer to SDLC which could stand for Software or System Development Life Cycle depending on [...]]]></description>
			<content:encoded><![CDATA[<p>There, I said it.  If you are developing an Incident Response Plan, Business Continuity Plan, Disaster Recovery Plan, or any other important plan for that matter, you should consider utilizing some type of development life cycle.  In the title I refer to SDLC which could stand for Software or System Development Life Cycle depending on who you are.  But for this let&#8217;s go with System Development Life Cycle (SDLC).</p>
<p>Now I am not going to map this all out for you.  There are plenty of resources out there and, frankly, I am just too tired right now.  But I will tell you that each of these aforementioned plans require that your organization defines your requirements, designs a solution, develops the solution, implements what you have, tests everything, and then maintains the plan.  Of course you do not have to follow the traditional <a title="Waterfall Model" href="http://en.wikipedia.org/wiki/Waterfall_model" target="_blank">waterfall</a> method as I have just described, but it is definitely a good place to start.  Actually, plans such as these would probably be better fitted by some type of group development strategy such as <a title="SCRUM" href="http://en.wikipedia.org/wiki/Scrum_(development)" target="_blank">SCRUM</a>.  This will allow you to identify the key personnel (Subject Matter Experts), managers (stake holders), and end-users (and anybody else that can provide positive input) and use them to define the requirements for success and then allow the team to determine how to best achieve the stated requirements.</p>
<p>Where did all of this come from?  Well, Hurricane Ike is in the Gulf of Mexico and it was originally headed straight for Corpus Christi.  Once the possibility of landfall here in CC was announce the town exploded with activity, including my house.  Food, water, clean yard, clean garage, board up the windows.  All of these things became last minute necessities that took the better part of a day to accomplish nearly completely.  What I learned from this all is that you might have a good plan, or inherited a good plan, but if you do not continue with testing and maintenance then the plan is going to fail.  A couple of personnal examples:  water filtering resources ran out of water, a run on plywood and particle board made many people wait for empending shipments to arrive, plywood coverings and their fastening locations warped over time making them hard or impossible to utilize, and more.  Small potatoes to a business but what about server power, alternate sites (are the buildings even still there?), backup management, location of personnel and their families, etc.  When was the last time that you have tested all of these?  Are your critical assets still the same?  What happens when you are backing everything up and you realize you have a security incident D&#8217;oh, two plans for follow simultaniously!!  Do you have the resources for that?</p>
<p>Using an SDLC will help you manage these plans better and insure that when you do need them, they work.  Good luck.</p>
<p>Go forth and do good things,</p>
<p>Don C. Weber</p>
<p>(NOTE: Slightly updated from the original.  I was very tired when I originally wrote this and I just wanted to add a few more clarifying points and examples.)</p>
]]></content:encoded>
			<wfw:commentRss>http://www.cutawaysecurity.com/blog/archives/320/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>I Should Take My Own Advice &#8211; Before Distaster</title>
		<link>http://www.cutawaysecurity.com/blog/archives/22</link>
		<comments>http://www.cutawaysecurity.com/blog/archives/22#comments</comments>
		<pubDate>Sat, 08 Apr 2006 13:56:42 +0000</pubDate>
		<dc:creator>cutaway</dc:creator>
				<category><![CDATA[Business Continuity]]></category>
		<category><![CDATA[Disaster Recovery]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.cutawaysecurity.com/blog/archives/22</guid>
		<description><![CDATA[Recently I wrote about personal safety being the response of the individual.&#160; Well, after a power outage last night I realize that I am a little deficient in my business continuity procedures.&#160; Here is a list of thing that I realized after the fact.

We were out of D-cell batteries.&#160; All but one of our flashlights [...]]]></description>
			<content:encoded><![CDATA[<p>Recently I wrote about <a href="http://www.cutawaysecurity.com/blog/archives/7" title="Personal Security Is YOUR Problem">personal safety</a> being the response of the individual.&nbsp; Well, after a power outage last night I realize that I am a little deficient in my business continuity procedures.&nbsp; Here is a list of thing that I realized after the fact.
<ul>
<li>We were out of D-cell batteries.&nbsp; All but one of our flashlights were dead.&nbsp; The one good thing was that I knew exactly where the flashlight were and they were accessible (which is a big feat with a 2.5 year old in the house).</li>
<li>We only had one candle.&nbsp; No batteries and no flashlights means that there is going to be a need for another light source.&nbsp; Backup, backup lightsource as you might say.&nbsp; A household should have several candles in containers that will not drip wax as they burn, possibly through the night.&nbsp; Also, remember that heat rises so be careful where you locate these for long periods of time.&nbsp; Check what is above the candle and make sure it is not flammable.</li>
<li>We don&#8217;t have a cooler.&nbsp; Now that I don&#8217;t drink beer as much as I use to I never missed the cooler.&nbsp; With short power outages you don&#8217;t have to worry about the things in the fridge but the power was out for 10 hours last night.&nbsp; With a cooler I would have been able to put some of the necessities on some ice.&nbsp; Luckily we immediately identified that we should not open the fridge and it remained cold enough that we don&#8217;t have to throw anything away.</li>
<li>We went to sleep without extra blankets.&nbsp; Although the nights have recently been warm, the power outage was caused by strong winds as a cold front was blowing in.&nbsp; By the time I woke up I was cold.&nbsp; Although my wife and I are resilient our two children are another story and I should have paid closer attention to their needs.</li>
</ul>
<p>I am sure that I could have found plenty of other things that I had forgotten but as it was already late we just took the children to bed.&nbsp; One good thing that came out of the power outage is that I got ten hours of sleep.&nbsp; Now when is the last time that I could say that. </p>
<p>There was one other thing that I did before going to bed.&nbsp; I unplugged as many electronic items that I could easily get to in the dark.&nbsp; You don&#8217;t know if the power is going to come back on normally or if it is going to surge.&nbsp; Unplugging things will ensure that the equipment is not damaged and help limit the chance that a piece of equipment will start a fire.&nbsp; The fire danger is most important during power outages that occur at night because, well, you are asleep.</p>
<p>So, how can you protect yourself?&nbsp; Well a quick Google search on &#8220;<a href="http://www.google.com/search?hs=IhH&amp;hl=en&amp;lr=&amp;client=firefox-a&amp;rls=org.mozilla%3Aen-US%3Aofficial&amp;q=home+power+outage+checklist&amp;btnG=Search" title="Google, help me protect my home!">home power outage checklist</a>&#8221; is one way.&nbsp; <a href="http://www.ehow.com/how_7954_prepare-home-power.html" title="How to Prepare Your Home for a Power Outage">eHow&#8217;s list </a>definately would have help me.&nbsp; Of course the <a href="http://www.neighborhoodlink.com/pasadena/uphastranch/genpage/266744483.html" title="Power Outage Checklist">Upper Hastings Ranch Association&#8217;s list</a> points out that you should not use candles and stick with flashlights.&nbsp; It also points out that generators should be kept outside and not run indoors.&nbsp; This is very important and may seem like a no-brainer but it <a href="http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2005/09/27/MNG99EUI251.DTL" title="Rescue work on Gulf Coast -- 9 deaths">definitelly happens</a>.&nbsp; Here is a good reference about the dangers of <a href="http://www.epa.gov/iaq/co.html" title="Sources of Indoor Air Pollution - Carbon Monoxide (CO)">Carbon Monoxide</a> from the <a href="http://www.epa.gov" title="EPA">Environmental Protection Agency</a>.</p>
<p>Cutaway</p>
]]></content:encoded>
			<wfw:commentRss>http://www.cutawaysecurity.com/blog/archives/22/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
