Recovery Process
The previous chapter looked at how an attack can be investigated to understand its cause and prevent a similar attack in the future. However, an organization cannot fully depend on the assumption that it can protect itself from all the attacks and risks that it faces. The organization is exposed to a wide range of potential disasters, such that it is impossible to have perfect protective measures against all of them. The causes of a disaster to the IT infrastructure can either be natural or man-made. Natural disasters are ones that result from environmental hazards or acts of nature; these include blizzards, wildfires, hurricanes, volcanic eruptions, earthquakes, floods, lightning strikes, and even asteroids falling from the sky and impacting the ground. Man-made disasters are ones that arise from the actions of human users or external human actors: these include fires, cyber warfare, nuclear explosions, hacking, power surges, and accidents, among others.
When...