Welcome to the tenth issue of ISO17799 News, designed to keep you abreast of developments and news with respect to ISO 17799 and information security. The information within the newsletter is totally free to subscribers and provides guidance on various practical issues, as well as commentary on recent Information Security incidents.
Included in this edition are the following topics:
INTRODUCING A DISASTER RECOVERY TEAM
Even for small enterprises, it is often necessary to establish a Disaster Recovery Team to handle the initial stages of an emergency situation. Certainly, it is vital for larger corporations.
The DRT should be made up of a group of specialists who have previously been nominated as being able to assist in dealing with the initial emergency situation. These will not necessarily be the same persons who are members of the Business Recovery Team (BRT). Although the configuration of the DRT will depend upon the type and severity of the emergency, and the nature of the organization itself, the following personnel may need to be involved according to circumstance:
• Key members of Senior Management • Premises Maintenance Staff • IT technicians • Communication technicians • Security staff • Personnel Manager • Premises of Facilities Manager • Fire and Safety Officer • Information Security Officer
The DRT is responsible for working with the emergency services to clear the initial emergency crisis situation, in order that the Business Recovery Team is able to start their activities. The DRT itself will only be able to start their own recovery activities once the emergency services have given permission for these duties to commence. During the initial emergency, the DRT will normally make themselves available to provide assistance to the emergency services, as appropriate.
Nominated members from the DRT should actually be on-standby or available at all times, and should ensure that their contact details are known. All members of the DRT should maintain an up-to-date copy of the BCP in a secure location off-site, and each member should also be issued with special equipment such as torches, hard hats, gloves, overalls, hand held dictaphones and mobile phones to use in such emergencies.
These initial preparations can make all the difference to the outcome of the disaster situation, and at the very least, will create a sound platform for the Business Recovery Team.