Re: The role of Information Security in BC

["Plesco, Todd" <tplesco () CHAPMAN EDU>]

Life safety in a "black hole" scenario trumps any immediacy of concerns to data privacy.  The first critical objective 
in that situation is to implement the basics of first aid and emergency response.  Proper training and awareness is 
critical for those highest probable disasters which may affect you.  As the information security steward, you may also 
have an opportunity to provide pre-selected critical data for lifesaving.  Some examples: facility access logs, 
emergency contacts, response plan call trees, etc.

Todd A. Plesco  CISM, CBCP
Chapman University, Director of Information Security
One University Drive, Orange, CA 92866
Phone: (714) 744-7979/Fax: (714) 744-7041


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Stephen 
C. Gay
Sent: Thursday, September 03, 2009 5:37 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] The role of Information Security in BC

I would like to solicit the group's opinion on the following question:

What is the role of Information Security in Business Continuity implementation?

An important point:
- There is no question that InfoSec is a critical player in Incident Response, Disaster Recovery, and Business 
Continuity Planning (key word "planning"). The question isn't about any of those scenarios, but rather when 
availability is non-existant, critical infrastructures have been disabled, and life safety is at the forefront...what 
is the role of Information Security?

While I think the answer will vary from institution to institution, I am very interested in your individual thoughts 
and plans.

Warm regards,

Stephen C Gay   CISSP
ITS Associate Director - Information Security Office
KSU Information Security Officer
sgay () kennesaw edu