<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>DataSecurityPolicies.com &#187; Business Continuity Policy</title>
	<atom:link href="http://www.datasecuritypolicies.com/category/security-policies/business-continuity-policy/feed" rel="self" type="application/rss+xml" />
	<link>http://www.datasecuritypolicies.com</link>
	<description></description>
	<lastBuildDate>Fri, 07 Nov 2008 03:21:37 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>IT Outsourcing &#8211; A Risk to Business Continuity?</title>
		<link>http://www.datasecuritypolicies.com/it-outsourcing-a-risk-to-business-continuity</link>
		<comments>http://www.datasecuritypolicies.com/it-outsourcing-a-risk-to-business-continuity#comments</comments>
		<pubDate>Fri, 07 Nov 2008 03:21:03 +0000</pubDate>
		<dc:creator>Marc</dc:creator>
				<category><![CDATA[Business Continuity Policy]]></category>
		<category><![CDATA[Security Policies]]></category>
		<category><![CDATA[Business Continuity]]></category>
		<category><![CDATA[Data Security Policies]]></category>

		<guid isPermaLink="false">http://www.datasecuritypolicies.com/?p=94</guid>
		<description><![CDATA[By Tom Farrar On September 15 2008, top US investment bank Lehman Brothers filed for Chapter 11 bankruptcy protection. Founded in 1850, in 2007 Lehman Brothers achieved record net revenues, net income and earnings per common share for the fourth consecutive year. In less than one year Lehman Brothers saw their once record net revenue [...]]]></description>
			<content:encoded><![CDATA[<p><img class="alignleft size-full wp-image-124" style="border: white 7px solid;" title="business-continuity" src="http://www.datasecuritypolicies.com/wp-content/uploads/2008/11/business-continuity.jpg" alt="" width="320" height="240" />By <a href="http://ezinearticles.com/?expert=Tom_Farrar">Tom Farrar</a></p>
<p>On September 15 2008, top US investment bank Lehman Brothers filed for Chapter 11 bankruptcy protection. Founded in 1850, in 2007 Lehman Brothers achieved record net revenues, net income and earnings per common share for the fourth consecutive year. In less than one year Lehman Brothers saw their once record net revenue plunge to $6 billion in the red. The question isn&#8217;t how does a mammoth organisation such as Lehman Brothers find themselves in this position but, in the current climate where seemingly financially stable firms are filing for bankruptcy, who is your business safe with?</p>
<p>Many businesses outsource (their IT) for various reasons; cost savings, operational expertise, capacity management to name a few. Outsourcing firms also often offer other services, such as business continuity planning and disaster recovery plans. Replication between multiple data centres, redundant links, work space relocation, ISO 27001 and BS 7799 are all good, but what happens when the company providing that service ceases to trade?<span id="more-94"></span> Suddenly you&#8217;re in a position where it takes weeks to get equipment back, you struggle to get support and the whole affair leads to hundreds of hour&#8217;s worth of downtime, and possibly bankruptcy for your own company. The possibilities are endless and the scenarios frightening.</p>
<p>So, how can you safeguard your business? To start with, you need to think about how the company would cope if its provider ceased trading. This means you need to have your own BCP/DR plan created by your company or a 3rd party, but not by the provider. You also need to ensure that your provider has its own BCP/DR plan, and that it includes any equipment/services it provides you. Remember, nothing is impossible, and the more eventualities you can factor for the better.</p>
<p>In the current economic climate many companies may see outsourcing as a way to reduce costs, however it should be remembered that you must never outsource accountability; at the end of the day, the senior managers/directors of a company are where buck stops, solely accountable to the business, its customers and its employees.</p>
<p>Keeping your critical systems in-house and employing internal IT staff capable of running these systems is one way to ensure business continuity. Helpdesk and minor systems (a system that can be down for a week, or can be easily migrated) can be outsourced, but keep these systems simple so if needs be you can move providers quickly and efficiently. Keep your options open and keep an eye on your providers for signs of potential problems. This shouldn&#8217;t fall under the IT Managers remit only however, senior manager and directors need to take a real interest in providers and, after all, they have the relevant skills to assess the provider&#8217;s stability.</p>
<p>In today&#8217;s gloomy economy anything is possible and the seemingly mighty have, and will continue, to fall. A dynamic, reserved approach to outsourcing whilst maintaining internal ownership of critical systems and over all accountability, internally and externally, is essential. This will enable your business to make savings and ensure business continuity -and survival- in these turbulent times.</p>
<p>Tom Farrar is an experienced IT Engineer with several years&#8217; tier 2 data centre / tier 2 carrier experience and a wide knowledge products/solution; Tom is practised in DNS zone management, enterprise anti-spam techniques, packet shaping and penetration testing. Tom is an a technical member of the Institute of Engineering and Technology and a Red Hat Certified Engineer.</p>
<p>Article Source: <a href="http://ezinearticles.com/?expert=Tom_Farrar">http://EzineArticles.com/?expert=Tom_Farrar</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.datasecuritypolicies.com/it-outsourcing-a-risk-to-business-continuity/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Data Centre Reliability Checklist</title>
		<link>http://www.datasecuritypolicies.com/data-centre-reliability-checklist</link>
		<comments>http://www.datasecuritypolicies.com/data-centre-reliability-checklist#comments</comments>
		<pubDate>Wed, 15 Oct 2008 06:06:07 +0000</pubDate>
		<dc:creator>Marc</dc:creator>
				<category><![CDATA[Business Continuity Policy]]></category>
		<category><![CDATA[Disaster Recovery Policy]]></category>
		<category><![CDATA[Security Policies]]></category>
		<category><![CDATA[Business Continuity Security Policy]]></category>
		<category><![CDATA[Data Center]]></category>
		<category><![CDATA[Security Policy]]></category>

		<guid isPermaLink="false">http://www.datasecuritypolicies.com/?p=84</guid>
		<description><![CDATA[By Amy Nutt Planning, creating, and building a data centre can be one of the most expensive tasks an IT director can face. In order to maximize cost effectiveness and achieve optimum performance, reliability is key. Data centre size can range from one room in an office to an entire building, but there are some [...]]]></description>
			<content:encoded><![CDATA[<p><img class="alignleft size-medium wp-image-85" style="border: white 7px solid;" title="data-center" src="http://www.datasecuritypolicies.com/wp-content/uploads/2008/10/data-center-tour-300x250.jpg" alt="" width="300" height="250" />By <a id="link_46" href="http://ezinearticles.com/?expert=Amy_Nutt">Amy Nutt</a></p>
<p>Planning, creating, and building a data centre can be one of the most expensive tasks an IT director can face. In order to maximize cost effectiveness and achieve optimum performance, reliability is key.</p>
<p>Data centre size can range from one room in an office to an entire building, but there are some basic requirements which must be implemented to ensure system reliability. When designing a data centre, efficient planning is very important. A number of areas must be addressed to ensure a dependable and efficient system which is capable of continued operation.</p>
<p><strong>Understand the potential causes of failure</strong></p>
<p>There are a number of areas cited as the most common causes of data centre failure:<span id="more-84"></span></p>
<p>• Environmental problems<br />
• Software failure &#8211; for example, memory leaks<br />
• Hardware failure &#8211; such as storage or processing problems<br />
• Operator or procedural error<br />
• Poor network reliability<br />
• Security breaches &#8211; for example hacker attack</p>
<p><strong>Environmental considerations</strong></p>
<p>When planning a data centre, there are a number of physical and architectural design features which must be implemented to ensure reliability:</p>
<p>• Adequate Air Supply: temperature must be maintained between 20 and 25 ºC and humidity between 40 and 60 %. Too much humidity can cause water to condense on internal components. However if the air is too dry, this can cause static electricity to discharge. Malfunction is likely if the above ranges are not maintained. This is one of the prime causes of data centre malfunction. Implementation of adequate air conditioning and correct architectural design to allow for air circulation between units is vital. Particular care needs to be taken to prevent &#8220;hotspots&#8221; from occurring.</p>
<p>• Safeguard against power loss: external environmental factors such as hurricane or snowstorm can cause power black outs. It is vital to have a generator to ensure continued function, as well as an uninterruptible power supply (UPS) for emergency power. These should be of sufficient size to power cooling systems.</p>
<p>• Fire protection systems: the simplest forms of fire protection are smoke detectors, for early detection of a fire. It is also vital to ensure fire containment to prevent the spread of a fire to the entire data centre. For example: Contained sprinkler systems or gaseous fire suppression.</p>
<p><strong>Software, hardware or network failure</strong></p>
<p>Tested and quality assured hardware and software from reputable brands can help increase reliability. Common malfunction in one component, such as an internal fan or storage disc, can quickly lead to failure in another. Ensuring network performance and reliability can also have a huge impact on the performance of the data system.</p>
<p><strong>Operational procedures</strong></p>
<p>It is impossible to completely rule out human error and operational issues. However, devising an operations procedure to not only maximize performance but also track reliability and malfunction is key. Conduct regular back-ups on each production server to ensure quick file repair in the event of damage. Provide adequate operator training to implement protocol and avoid the most basic of errors such as leaving discs in drives, which would prevent an auto-reboot in the event of system failure.</p>
<p><strong>Data security</strong></p>
<p>Particularly important in large data centres with sensitive information, is to ensure adequate physical security. Corporations may consider outsourcing their <a id="link_76" href="http://www.fusepoint.com/english/html/data_centre_information.html" target="_new">data centre</a> to an off-site location with 24 hour security guards and video surveillance. System security also requires keeping up-to-date with the latest security and anti-virus software.</p>
<p><strong>Avoid single point of failure</strong></p>
<p>One final key consideration is to avoid having a single point of failure. Test the system before it goes operational and ensure that if one component fails there is sufficient backup to ensure the data centre can still function. Back-up will make sure that your important data is never lost.</p>
<p>Our company is <a id="link_77" href="http://www.fusepoint.com/english/html/compliance.html" target="_new">SAS 70</a> certified&#8230; the highest standards for measuring and improving data centre operations and management. Providing clients with solutions for business continuity services, managed hosting, managed security and disaster recovery for organizational security.</p>
<p>Article Source: <a id="link_78" href="http://ezinearticles.com/?expert=Amy_Nutt">http://EzineArticles.com/?expert=Amy_Nutt</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.datasecuritypolicies.com/data-centre-reliability-checklist/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Disaster Recovery Policy</title>
		<link>http://www.datasecuritypolicies.com/disaster-recovery-policy</link>
		<comments>http://www.datasecuritypolicies.com/disaster-recovery-policy#comments</comments>
		<pubDate>Sat, 01 Dec 2007 00:16:11 +0000</pubDate>
		<dc:creator>Marc</dc:creator>
				<category><![CDATA[Business Continuity Policy]]></category>
		<category><![CDATA[Disaster Recovery Policy]]></category>
		<category><![CDATA[Security Policies]]></category>
		<category><![CDATA[Business Continuity Security Policy]]></category>
		<category><![CDATA[Information Security Policy]]></category>
		<category><![CDATA[Security Policy]]></category>

		<guid isPermaLink="false">http://www.datasecuritypolicies.com/disaster-recovery-policy</guid>
		<description><![CDATA[The Laptop Security Blog over at www.absolute.com has an interesting post about how the Auditor General of Canada says government agencies aren&#8217;t upholding the Government Security Policy (GSP). In particular, the Auditor General said that the security policy doesn&#8217;t include a disaster recovery plan. Even if you work in a company you can expect that [...]]]></description>
			<content:encoded><![CDATA[<p>The <a href="http://blog.absolute.com/">Laptop Security Blog</a> over at <a href="http://www.absolute.com/">www.absolute.com</a> has an <a href="http://blog.absolute.com/canadian-government-audit-on-data-security/">interesting post</a> about how the Auditor General of Canada says government agencies aren&#8217;t upholding the Government Security Policy (GSP).</p>
<p>In particular, the Auditor General said that the security policy doesn&#8217;t include a disaster recovery plan.</p>
<p>Even if you work in a company you can expect that auditors are going to look for a disaster recovery policy and disaster recovery plan in your corporate security policy.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.datasecuritypolicies.com/disaster-recovery-policy/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Business Continuity Presentation</title>
		<link>http://www.datasecuritypolicies.com/business-continuity-presentation</link>
		<comments>http://www.datasecuritypolicies.com/business-continuity-presentation#comments</comments>
		<pubDate>Sun, 16 Sep 2007 22:07:02 +0000</pubDate>
		<dc:creator>Marc</dc:creator>
				<category><![CDATA[Business Continuity Policy]]></category>
		<category><![CDATA[Security Policies]]></category>
		<category><![CDATA[Business Continuity Security Policy]]></category>
		<category><![CDATA[Information Security Policy]]></category>
		<category><![CDATA[Security Policy]]></category>

		<guid isPermaLink="false">http://www.datasecuritypolicies.com/business-continuity-presentation</guid>
		<description><![CDATA[When you&#8217;re developing your Business Continuity Security Policy you may want to deliver a presentation to your company explaining what business continuity is all about. Here&#8217;s a Business Continuity Presentation I gave to educate a company about the need for business continuity. Feel free to use it as you like. Topics covered in the presentation [...]]]></description>
			<content:encoded><![CDATA[<p>When you&#8217;re developing your Business Continuity Security Policy you may want to deliver a presentation to your company explaining what business continuity is all about. Here&#8217;s a <a href="http://www.datasecuritypolicies.com/wp-content/uploads/2007/03/business-continuity-presentation.zip" title="business-continuity-presentation.zip">Business Continuity Presentation</a> I gave to educate a company about the need for business continuity. Feel free to use it as you like.</p>
<p>Topics covered in the presentation include:</p>
<ul>
<li>Definitions</li>
<li>Why Have a Plan?</li>
<li>Statistics</li>
<li>Getting Your BCP Plan Started &amp; Sold</li>
<li>Getting the BCP Approved</li>
<li>Building the BCP</li>
<li>Business Impact Analysis</li>
<li>Risk Assessment</li>
<li>Risk Management</li>
<li>Risk Monitoring</li>
<li>Insurance Integration</li>
<li>What Are the Cost Issues?</li>
</ul>
<p>Enjoy!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.datasecuritypolicies.com/business-continuity-presentation/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
