A Framework for Optimizing the Computer Security Incident Business Continuity Plan

Abstract

As information technology systems evolve, they also need to be protected against today's considerable amount of threats to the information they process, transmit and store. So any failure or disaster in information technology system could have a serious consequences for a company (Botha and Solms, 2004). As a result of dependency on technology, majority of these companies on these systems, cannot afford to ignore the need for business continuity and disaster recovery planning regardless of the company's size, revenues, or number of staff. The need to plan for potential disruptions to technology services had increased exponentially and business continuity and disaster recovery planning has become imperative (Snedaker, 2007). Growing dependence upon computer information systems has created vulnerabilities that have not been uniformly addressed. Then computer security incident management plan is required to tackle issues that lead to system failure. In this paper, a framework is established to secure the network of a company from unknown attack, detect and monitor events that may lead to business disruption, as well as respond to plan so that business operations can continue within a shortest possible instant. By implementing this framework therefore, the effectiveness of various business continuity and disaster recovery practices will be explored to increase information systems resiliency.