CSIA PROJECT 1

profileBYSTANDER
Businessdisruptionresponseframework.docx

1

Business disruption response framework

Student name

Professor

Course

Date of submission

Business disruption is referring to instances where the established players in an industry fail to keep up with changes brought about by technological innovation and are subsequently challenged or displaced.

Businesses that have been disrupted face challenges because they're having to start over from scratch, depending on innovations from other companies and discovering new ways to market their product. The challenge is in successfully reinventing so that you learn from both your mistakes as well as others' experiences (Kang, 2021).

Advantages of responding to business disruptions caused by natural disasters and Advantage of managing cyber attack Disaster recovery is an organization's ability to continue functioning at an acceptable level despite a disruptive event. The term disaster recovery is typically used in the context of natural disasters, such as floods, hurricanes and earthquakes. A disruption can also be caused by a cyber-attack; this is sometimes called 'disaster recovery' in the context of IT disaster recovery (Nguyen, 2021).

Ideally, there are Challenges faced by organizations during a disaster include loss of critical infrastructure (e.g., power), loss of employees, damaged facilities and data loss or corruption. These issues can have impacts which range from minimal disruption—such as the temporary closure of a retail store or call center due to a power outage—to serious consequences such as lawsuits and fines for not meeting regulatory obligations.

Managing these challenges requires planning, training, testing and documentation to ensure that when an event occurs, the organization can respond effectively and minimize the impact on its customers or other stakeholders. A Business Impact Analysis (BIA) is often used to help determine what to include in your disaster recovery plan.

Typically, recovery time objective is 1 hour and recovery point objective is 1 day. In case of cyber-attack, the security department is responsible for ensuring that they detect the cyber-attack in time and take necessary actions to mitigate the impact so that it does not affect business continuity (United States. Congress. House. Committee on Ways and Means, 2021).

The security department has to manage the following recovery objectives. Amongst them include Identify malicious activities on network devices and infrastructure systems in order to protect data integrity and availability. Detect critical system intrusions or virus infections within network devices and infrastructure systems in order.

References

Kang, H. (2021). A study on how to build a disaster recovery system that can minimize recovery time Objective(RTO) and recovery point Objective(RPO) to ensure business continuity. Journal of Software Assessment and Valuation17(2), 91-99.  https://doi.org/10.29056/jsav.2021.12.10

Nguyen, B. U. (2021). A simultaneous cyber-attack and a missile attack. Proceedings of 8th International Conference on Simulation and Modeling Methodologies, Technologies and Applications https://doi.org/10.5220/0006847504930499

United States. Congress. House. Committee on Ways and Means. (2021). General tax reform: Tax treatment of capital recovery (investment credit, accelerated depreciation and amortization).