RE: Scare Me !!

["Joe Pung" <PUNGJOS () aquinas edu>]

Do you have a disaster recovery plan?  If so, you could try to make 
security a component of the overall plan.  A "disaster", IMO, can  
occur from one or more of the following:  1) nature (fire, tornado, 
etc.), 2) machine failure, and 3) people (this is where you can tie in 
security).  You can use a risk matrix (Risk = Probability of Event 
Occurring  X  Assets at Risk) to show the relative amount of 
funding which should be devoted to each triad and to BRP overall. 
Once you have funding, then you should be able to allocate 
according to your perception of risks.

Joe

> If your internet address (bridge.com) represents your workplace then all
> you need to do is point to the problems at E-Bay.  If a hacker shutsdown
> your systems for 1 day then you could be out millions.  While thier
> problem is not related to hackers it does relate to having a depended upon
> service unavailable.  If you map out the steps that it would take to get
> your service back up and running after an attack then you will have a
> solid number saying we will be out for X hours (best case scenario) or
> days. Working in the financial services arena money, and reputation, talk
> and bull---- get thrown back in your face.
>
> Tim