Chapter 17. Day 17 – Security Operations - Incident Management and Disaster Recovery
This chapter covers incident management and disaster recovery concepts from the perspective of physical and operational security domains. Concepts related to incident management controls, business continuity planning process, and disaster recovery planning are covered with relevant examples and illustrations:
Observe the preceding diagram. Incidents may cause disruption to business processes and activities. In turn, an unattended incident may also lead to disaster. A suitable business continuity planning process with disaster recovery planning will ensure continuity in business operations.
In this chapter, we will cover the following topics:
- Foundational concepts on incident management
- Preventative measures
- Patch and vulnerability management
- Change management principles
- Disaster recovery and business continuity exercises
