Primary Controls in Place
IT Alternate Site (ITAS)
The IT Alternate Site has three primary controls, and they include Redundant Site, Hot Site and Cold Site. In this area of planning, the Disaster Recovery Plan (DRP) proves to be excellent with respect to the improved and heightened primary activities within the three sites.
Data Centre Controls (DCC)
For the purposes of getting rid of IT crisis event, DCC makes use of six physical controls; Electrical Equipment Protection and Power Backup (EEPP), Fire Suppressant Systems (FSS) and Gauges and Alarms (GA). Others include Physical Security (PS), Raised Floors, Wiring and Cables (RFWC) and Miscellaneous Controls (MC). The performance of the whole DCC is good.
Data Centre Recovery (DCR)
With respect to the role of data recovery, the functionality of the DCR can be rated as good. This is due to the different mechanisms set in place towards addressing the different functions to be performed. It has well set and improved structures for documentation for undertaking the various steps and assigning personnel their tasks.
Information Management (IM)
Its performances can be rated as excellent through the two primary mechanisms set for storing and safeguarding relevant and useful documents; Hardcopy Data and Electronic Data.
Information Security (IS)
The roles played by the IS in providing security to the top and secret organization information can be rated as fair since it relies on the execution conducted by other departments of management and their objectives.
Suggested Improvements
IT Alternate Site (ITAS)
Though the in its standby status is always ready, it should be made fully operational so as to enhance its roles. On the other hand, the cold site should be made operational at all times so as to take care of both predictable and unpredictable rising needs.
Data Centre Controls (DCC)
In EEPPB, the number of Surge Protectors and Universal Power Supply (UPS) should be increased so as to increase the whole process of power backup. On the other hand, the Free Suppressant Systems (FSS) should be made more efficient so as to prevent the possible damages to electrical equipment.
Case Study A-8
In situations where there is a fire breakage outside the main building, a typical employee needs to take the action of alerting the whole organization; undertaking activation of the fire alarm. The second thing is to find out, by the assistance of the Emergence Response Team (ERT), on whether they need to conduct a vertical or horizontal vacation from the building. On the other hand, when the same happens, the employee on the other auxiliary building needs to report the matter to their ERT and the nearby Police Department to respond to the threat.
Case Study B-8
In situations where there is a fire breakage at the Central Plant, the typical employee in this particular organization needs to undertake all the possible notification procedures. In undertaking this, the first step will be to notify the central point that has been set aside for contact. If the same happens, the employee at the Western Plant should take the step of informing the central point as well as other external departments such as police, which may be unreachable by the Central Plant.
The logical location of the Emergency Operation Centre (EOC) entails a place where different groups gather and undertake the execution of ERP as well as BCP. On the other hand, the second and third Emergency Command Post (ECP) have logical locations with closeness to the scene but at least safer from the possible threats from the scene. For those groups with their location inside the Central Plant, the primary EOC’s logical position is within the organization while the secondary and tertiary EOC have their logical locations at the Western Plant.