SEC 591 Week 4 Discussion 1 + Discussion 2

SEC 591 Disaster Recovery-Forensics and Security 

(DeVry - Spring 2016)

SEC 591 Week 4 Discussion Topic 1; Should We Disrupt Operations to Test

Section 3.5 of the SP800-34-rev1 discusses the importance of testing, classroom, and functional exercises; this week in lecture we touched on the various types of testing that DRPs undergo. How much testing is appropriate? How is success measured?

SEC 591 Week 4 Discussion Topic 2; Auditing the DRP to Standards

Evaluate the following documents:

1.  AIRMIC ERM & ISO31000 ( ERM ISO31000 ); note this site requires an e-mail address to obtain the document for personal use only. So this reference is optional.

2.  ISO 17799 Security Standard (http://www.computersecuritynow.com/presentation/)

3. NIST 800-34 rev1