Executing Response and Recovery Plans
Security managers need to consider various aspects with respect to the execution of a response and recovery plan. For the smooth execution of the plan, it is very important to have defined roles and responsibilities for each individual. For the overall management of the plan, there should be a facilitator or director who is in charge of execution. This role should be assigned to a senior executive who has sufficient authority to make decisions during the crisis.
A security manager should consider the following aspects for the execution of the plan:
- To ensure that control procedures are implemented in such a way that risks are appropriately addresseFor example, the mere installation of anti-malware is not sufficient. Virus signature files should be updated at regulator intervals (ideally they should be automated to update daily). Any time gap between the updates can be subject to exposure.
- In the case of a malware-infected server...
