Developing Contingency Strategies for Information System

Assessment Description Note: Company’s name is “Across The States Bank” 24/7 monitoring of all network activity is an invaluable tool for enhancing your security posture. An effective Incident Response Plan (IRP) is essential to mitigation of attacks, while a Disaster Recovery Plan (DRP) provides support for unexpected environmental obstacles to information systems. For both IRP and DRP, a company must develop strategies to recover from unexpected interruptions, and exercise these plans to ensure all applicable personnel are prepped and aware of their roles. In Topic 5, a minor Business Impact Analysis (BIA) was conducted, which identified the critical assets to the company. These assets will be used to aid in the development of a contingency plan to ensure business continuity in the presence of an event. (critical assets to the company from topic 5 attaached) This assignment exercises the analysis and development of a Lite Contingency Plan (BIA, IRP, DRP, and Business Continuity Plan: BCP). The development of a workflow diagram is essential in displaying the relationship between the four components. This is critical for the IRP and DRP, as an IRP can launch a DRP when a threat disrupts a system through ransomware, DDoS, or other malicious attacks against a system. Use the following guidelines to create an 8- to 12-page report using the same corporate profile selected earlier. Business Impact Analysis 1. In one to two paragraphs, summarize the objective of conducting a BIA for your selected company. Describe the benefits, potential outcomes, and company enhancements. 2. Obtain the list of threats against the assets identified in your Topic 5 assignment, "Risk Management Assessment and Control," and place them in a table. 3. Prioritize this list from highest impact to lowest impact to the company. 4. Add a column and describe how loss of the process, system, data, etc., will impact the company. 5. Assuming worst-case scenario, add a column and describe the appropriate measures to recover from the threat.