Facility Integrated Contingency Planning - Case Study Example

Planning for an uncertain situation encompasses a broad process known as contingency planning. This broad process consists of the following components:
A plan for incident response
A plan for disaster recovery
A plan for business continuity
These three components account for all-around variables that constitute an uncertain occurrence, thereby informing the planning process for the underlying situation.
Question 2
NIST defines a CP process that is made up of seven steps, which include:
i. Formulation of a policy statement about contingency planning.
ii. Analyzing business impact.
iii. Determination of preventive controls.
iv. Development of strategies for recovery.
v. Development of a contingency plan that is IT-based.
vi. Testing the plan at hand, conducting training, and undertaking exercises that pertain to the entire planning process.
vii. Maintaining the plan over time.
The process has a standard approach that is recommended by NIST, which is to ensure that the CP process is characterized by continuity throughout the seven steps (Socha 64).
Question 3
IR preplanning, Incident detection, Incident reaction, and Incident recovery are the four IR planning steps (Socha 127).
IR preplanning – This step pertains to all activities associated with the first three steps in a CP process as outlined in question 2 above. In other words, IR preplanning entails the formulation of a policy statement for contingency planning, analysis of the underlying business impact, and setting up preventive controls about the entire planning process.
Incident detection – This step entails determining the cause of an incident. Here, only two alternative causes are speculated; the occurrence of an incident as a result of routine systems or as a result of an actual incident (Socha 161). Determination of the cause of an incident is informed by the classification of that incident accordingly.
Incident reaction – An actual incident is responded to, and it is this response(s) that is associated with the incident reaction. Once an actual incident has been identified, all the activities directed to that incident constitute a response that is hereby referred to as the reaction.
Incident recovery – Recovery is realized after all responsive activities have been executed. It is after containing the incident and successfully regaining systems control that the recovery step begins. This step entails assessing the extent of realized damage, restoring any needed data and/ or services in that line, frequent system examination and monitoring, and getting all stakeholders back on track within the organization.
Question 4
Strategies for containment vary from one organization to another, with the commonly used being disconnection of communication sources, application of filtering rules, and incident monitoring (Socha 203). External attacks are contained by disconnecting communication sources that have been impacted. Doing so safeguards the organization against external networks. Rules used for filtering purposes restrain network access based on their respective types. Finally, the incident can be monitored as a specific course of action is being undertaken. These strategies are tailored towards ensuring that the incident is stopped and that systems control is successfully recovered.
Part Two
Question 1
The document highlights the process of contingency planning and all the activities involved in ensuring that the planning process is a success. The various types of plans associated with contingency planning for IT systems are presented and their functionality is described. It is noted that the planning process is significantly different from the actual plan development. The varying processes and activities that uniquely define the two are critically analyzed. Over and above this, the technicality of the matter is captured to enhance the understanding of the text.

Part Three
Response to Student #1
The special publications are informative and commendable. Student #1 has highlighted critical components and their affiliations with contingency planning. IT systems have proven to be diverse and dynamic, with NIST and other affiliate players doing their best to keep the technology industry up and running. Read More