RE: Disaster Recovery Plan

["Steve Hillier" <securityfocus () mastermindtoys com>]

You should have a look at the BSI IT Baseline Protection Manual
(http://www.bsi.bund.de/gshb/english/etc/menue.html). It is a German
document translated into English, and has a very good systematic
approach for identifying your critical systems and determining the
appropriate amount of resources to invest in protecting those systems.
Consider it more of a business continuity manual, rather than a disaster
recovery guide.

sph


> -----Original Message-----
> From: ka55ad [mailto:ka55ad () gmail com] 
> Sent: Tuesday, June 22, 2004 9:53 a
> To: security-basics () securityfocus com
> Subject: Disaster Recovery Plan
>
>
> Although this might be slightly off topic, I was wondering if 
> anyone could give me some suggestions for some disaster 
> recovery plans. Right now we are a small place (less than 50 
> employees total), and I am not comfortable with the current 
> Disaster Recovery plan (it was created before I came on 
> board). It basically involves performing a master backup on 
> tape once a month and then doing a differential backup every 
> week night. We have 2 sets of differential tapes that we keep 
> off site and alternate every week, but the masters are not 
> kept off site.
>
> I am working with a very limited budget. Can anyone recommend 
> a good solution that will ease my worries? Thanks.
>
> --------------------------------------------------------------
> -------------
> Ethical Hacking at the InfoSec Institute. Mention this ad and 
> get $545 off 
> any course! All of our class sizes are guaranteed to be 10 
> students or less 
> to facilitate one-on-one interaction with one of our expert 
> instructors. 
> Attend a course taught by an expert instructor with years of 
> in-the-field 
> pen testing experience in our state of the art hacking lab. 
> Master the skills 
> of an Ethical Hacker to better assess the security of your 
> organization. 
> Visit us at: 
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
> --------------------------------------------------------------
> --------------



---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------