Articles
Frequently the two disciplines each plan in their respective silos without fully understanding how similar their processes are. The individuals sitting on the security incident response team are usually the same individuals sitting on the business continuity command team. The only difference is the type of incident each is managing. This presentation will discuss the common elements and contrast each using examples from actual incidents. The security incident response example is an actual plan developed for use by business executives rather than technologists.
This presentation will share examples of security and business continuity incident response plans, discuss the common requirements, show how specific types of incidents merge, and present the case for using a common methodology. Many malicious code incidents become business continuity and/or disaster recovery issues when hardware and data is destroyed and business operations suffer extended interruptions. An example of how the BIA results may be used during incidents to aid the team in understanding the impact of decisions made in the heat of battle will also be provided.
