DOCSLIB.ORG

Iso/Dis 22383

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Iso/Dis 22383 W - IE 90 V af E 50 ef R i) t/ 3 P a is 38 . /s 2 D eh s -2 R t rd is .i : a d A s d d o- D d r an is N r da st e/ a n g/ c A d ta o c5 T n s al 5 S a ll t 2 t u ca 9 h (s F i/ 7 e a b8 T h. 0 Security and resilience — Authenticity, integrity and i e -5 DRAFT INTERNATIONAL STANDARD .it f trust for products and documents — Guidelines and s 1a rd -a performance criteria for authentication solutions for a 4e nd 8 material goods ta -4 /s e :/ 6 s 68 Sécurité et résilience — Authenticité, intégrité et confiance pour les produits et les documents — Lignes tp directrices et critères de performance relatifs aux solutions d'authentificationISO/TC des biens matériels ht Voting begins on: ICS: 03.100.01 2019-09-03 292 Secretariat: ISO/DIS 22383 Voting terminates on: 2019-11-26 SIS THIS DOCUMENT IS A DRAFT CIRCULATED FOR COMMENT AND APPROVAL. IT IS THEREFORE SUBJECT TO CHANGE AND MAY NOT BE REFERRED TO AS AN INTERNATIONAL STANDARD UNTIL PUBLISHED AS SUCH. IN ADDITION TO THEIR EVALUATION AS BEING ACCEPTABLE FOR INDUSTRIAL, TECHNOLOGICAL, COMMERCIAL AND USER PURPOSES, DRAFT INTERNATIONAL STANDARDS MAY ON OCCASION HAVE TO BE CONSIDERED IN THE LIGHT OF THEIR POTENTIAL TO BECOME STANDARDS TO WHICH REFERENCE MAY BE MADE IN NATIONAL REGULATIONS. RECIPIENTS OF THIS DRAFT ARE INVITED TO SUBMIT, WITH THEIR COMMENTS, NOTIFICATION OF ANY RELEVANT PATENT RIGHTS OF WHICH THEY ARE AWARE AND TO PROVIDE SUPPORTING DOCUMENTATION. This document is circulated as received from the committee secretariat. ISO/DIS 22383:2019(E) Reference number © ISO 2019 ISO/DIS 22383:2019(E) W - IE 90 V af E 50 ef R i) t/ 3 P a is 38 . /s 2 D eh s -2 R t rd is .i : a d A s d d o- D d r an is N r da st e/ a n g/ c A d ta o c5 T n s al 5 S a ll t 2 t u ca 9 h (s F i/ 7 e a b8 T h. 0 i e -5 .it f s 1a rd -a a 4e nd 8 ta -4 /s e :/ 6 s 68 tp ht © ISO 2019 All rights reserved. UnlessCOPYRIGHT otherwise specified, PROTECTED or required inDOCUMENT the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of the requester. CP 401 • Ch. de Blandonnet 8 CH-1214ISO copyrightVernier, Geneva office Phone: +41 22 749 01 11 PublishedWebsite: inFax: Switzerland www.iso.org +41 22 749 09 47 Email: [email protected] ii © ISO 2019 – All rights reserved ISO/DIS 22383:2019(E) Contents Page Foreword ........................................................................................................................................................................................................................................iv Introduction ..................................................................................................................................................................................................................................v 1 Scope ................................................................................................................................................................................................................................. 1 2 Normative reference ......................................................................................................................................................................................... 1 3 Terms and definitions ..................................................................................................................................................................................... 2 4 General principles ............................................................................................................................................................................................... 4 4.1 Introduction .............................................................................................................................................................................................. 4 ................................................................................. 5 4.3 Categorization of authentication solutions .................................................................................................................... 6 4.2 Security-by-Design4.3.1 Provision of process knowledge for Authentication .............................................................................................................................................. solutions 7 4.3.2 Inspection .............................................................................................................................................................................. 7 4.3.3 Categories of authentication elements ......................................................................................................... 8 5 Performance criteria specification based on risk analysis ...................................................................................... 9 5.1 Introduction .............................................................................................................................................................................................. 9 W .....................................................................................................................................................................E 0- 9 5.3 Performance criteria categories ............................................................................................................................................I f9 10 V 0a 5.25.4 RiskCriteria analysis for the elements selection of authenticationE elements .........................................................................................f5 10 ) /e ...........................................................................................................................................R i t 3 P a is 38 10 . /s 2 5.4.2 Attack resistance ...........................................................................................................................................................D eh s -2 11 R t rd is 5.4.15.4.3 PhysicalIntegration characteristics process ......................................................................................................................................................i : a d 12 A s d d o- 5.5 Attack resistance criteria forD thed selectionr ofan authenticationis tools .......................................................12 N r da st e/ 5.5.1 General...................................................................................................................................................................................a n g/ c 12 A d ta o c5 5.5.2 ObsolescenceT ....................................................................................................................................................................n s al 5 13 S a ll t 2 t u ca 9 h (s F i/ 7 .................................13 e a b8 T h. 0 .......................................................................13 i e -5 5.7 Criteria5.5.3 forAssessing the selection the vulnerability of authentication.it f and resistance solutions of ......................................................................................... authentication tools 13 s 1a 5.6 Criteria5.7.1 toLocation select authentication / environmentrd - aelements for the authentication and tools’ supply process ............................................................13 a 4e 5.7.2 Authentication parametersnd 8 ..................................................................................................................................14 ta -4 /s ...........................................................................................................................................................e 14 :/ 6 s .................................................................................................................................................................68 14 tp 5.7.3 Life cycleh tcriteria ..................14 5.7.45.7.6 SecurityOperation policy .............................................................................................................................................................................15 5.7.5 Compliance with regulations, security practices and quality procedures 6 Effectiveness assessment of the authentication solution .......................................................................................15 6.1 General ........................................................................................................................................................................................................15 6.1.1 Authentication solution effectiveness assessment ..........................................................................15 6.2 Effectiveness assessment in manufacturing of authentication elements ..........................................17 ......................................................................17 6.4 Effectiveness of the application of the authentication elements ..............................................................17 6.36.5 EffectivenessData management of the ............................................................................................................................................................................. delivery of the authentication elements 18 ....................18 ................18 6.6 Effectiveness
Load more

Recommended publications
  • ECSO State of the Art Syllabus V1 ABOUT ECSO
    STATE OF THE ART SYLLABUS Overview of existing Cybersecurity standards and certification schemes WG1 I Standardisation, certification, labelling and supply chain management JUNE 2017 ECSO State of the Art Syllabus v1 ABOUT ECSO The European Cyber Security Organisation (ECSO) ASBL is a fully self-financed non-for-profit organisation under the Belgian law, established in June 2016. ECSO represents the contractual counterpart to the European Commission for the implementation of the Cyber Security contractual Public-Private Partnership (cPPP). ECSO members include a wide variety of stakeholders across EU Member States, EEA / EFTA Countries and H2020 associated countries, such as large companies, SMEs and Start-ups, research centres, universities, end-users, operators, clusters and association as well as European Member State’s local, regional and national administrations. More information about ECSO and its work can be found at www.ecs-org.eu. Contact For queries in relation to this document, please use [email protected]. For media enquiries about this document, please use [email protected]. Disclaimer The document was intended for reference purposes by ECSO WG1 and was allowed to be distributed outside ECSO. Despite the authors’ best efforts, no guarantee is given that the information in this document is complete and accurate. Readers of this document are encouraged to send any missing information or corrections to the ECSO WG1, please use [email protected]. This document integrates the contributions received from ECSO members until April 2017. Cybersecurity is a very dynamic field. As a result, standards and schemes for assessing Cybersecurity are being developed and updated frequently.
    [Show full text]
  • Iso 22301:2019
    INTERNATIONAL ISO STANDARD 22301 Second edition 2019-10 Security and resilience — Business continuity management systems — Requirements Sécurité et résilience — Systèmes de management de la continuité d'activité — Exigences Reference number ISO 22301:2019(E) © ISO 2019 ISO 22301:2019(E) COPYRIGHT PROTECTED DOCUMENT © ISO 2019 All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of the requester. ISO copyright office CP 401 • Ch. de Blandonnet 8 CH-1214 Vernier, Geneva Phone: +41 22 749 01 11 Fax:Website: +41 22www.iso.org 749 09 47 Email: [email protected] iiPublished in Switzerland © ISO 2019 – All rights reserved ISO 22301:2019(E) Contents Page Foreword ..........................................................................................................................................................................................................................................v Introduction ................................................................................................................................................................................................................................vi 1 Scope ................................................................................................................................................................................................................................
    [Show full text]
  • En Iso 22300
    Terminology in Crisis and Disaster Management CEN Workshop Agreement Georg Neubauer, AIT http://www.ait.ac.at Background . The FP7 project EPISECC develops a concept of a common information space including taxonomy building to improve interoperability between European crisis managers and stakeholders . EPISECC is mandated to provide the outcome of its research to international standardisation – involvement in CEN TC391 . Within the FP7 project DRIVER a standard on terminology in crisis management shall be developed (among multiple other goals) . DRIVER & EPISECC will jointly co-operate on this issue . Additional support is planned from the FP7 projects REDIRNET, SECINCORE and SECTOR (all dealing with interoperability) 2 Scope and Purpose . Provision of an overview of existing terminologies and definitions applied in multiple domains of crisis and disaster management . Overview on synonyms with the same or similar definitions . Overview on different definitions for the same term . Benefit: Support enhancement of mutual understanding of users/organizations applying different standards/taxonomies . Benefit: Potential long term perspective: enhanced use of most suitable terms and definitions arising from multiple sources 3 Scope and Purpose (Example) Domain Term Definition Standard/document Intended Users situation where widespread human, material, economic or environmental losses have occurred which exceeded the ability of the affected organization (2.2.9), community or society to respond and recover using its own resources Societal security disaster ISO 22300 (2012) not specified A serious disruption of the functioning of a community or a society involving widespread human, material, economic or environmental losses and impacts, which exceeds the ability of the affected community or society to cope using its own authorities, pratictioners not specified disaster resources.
    [Show full text]
  • Risk Management in Crisis: Winners and Losers During the COVID-19 Pandemic/Piotr Jedynak and Sylwia Bąk
    Risk Management in Crisis Risk management is a domain of management which comes to the fore in crisis. This book looks at risk management under crisis conditions in the COVID-19 pandemic context. The book synthesizes existing concepts, strategies, approaches and methods of risk management and provides the results of empirical research on risk and risk management during the COVID-19 pandemic. The research outcome was based on the authors’ study on 42 enterprises of different sizes in various sectors, and these firms have either been negatively affected by COVID-19 or have thrived successfully under the new conditions of conducting business activities. The anal- ysis looks at both the impact of the COVID-19 pandemic on the selected enter- prises and the risk management measures these enterprises had taken in response to the emerging global trends. The book puts together key factors which could have determined the enterprises’ failures and successes. The final part of the book reflects on how firms can build resilience in chal- lenging times and suggests a model for business resilience. The comparative anal- ysis will provide useful insights into key strategic approaches of risk management. Piotr Jedynak is Professor of Management. He works at Jagiellonian University in Cracow, Poland, where he holds the positions of Vice-Rector for Financial and HR Policy and Head of the Management Systems Department. He specializes in risk management, strategic management and management systems. He is the author of numerous publications, an auditor and consultant to many public and business organizations. Sylwia Bąk holds a PhD in Management Sciences.
    [Show full text]
  • Linee Guida Per Lo Sviluppo E La Definizione Del Modello Nazionale
    Linee guida per lo sviluppo e la definizione del modello nazionale di riferimento per i CERT regionali AGID 13 feb 2020 Indice 1 Premessa 3 2 Riferimenti 5 2.1 Leggi...................................................5 2.2 Linee Guida e Standard.........................................5 3 Definizioni e Acronimi 7 4 Contesto 9 4.1 Quadro di riferimento nazionale.....................................9 4.2 Impianto normativo applicabile ai CERT................................ 12 4.3 Organismi a supporto della Cyber Security............................... 18 4.4 Standard per la Cyber Security...................................... 21 5 Introduzione ai CERT 31 5.1 CERT: significato e definizioni generali................................. 31 5.2 Categorie di CERT............................................ 32 5.3 Mission dei CERT............................................ 32 5.4 Identificazione della constituency.................................... 33 5.5 CERT regionali.............................................. 34 6 Modello organizzativo 39 6.1 Modello indipendente.......................................... 39 6.2 Modello incorporato........................................... 41 6.3 Modello campus............................................. 43 7 Modello amministrativo 45 8 Servizi 47 8.1 Modelli di classificazione dei servizi.................................. 47 8.2 Servizi offerti dai CERT Regionali.................................... 50 9 Processo di gestione degli incidenti di sicurezza 57 9.1 Definizioni...............................................
    [Show full text]
  • WORK PROGRAMME of General Directorate of Standardization - ALBANIA (Period 1 July to 31 December 2018)
    WORK PROGRAMME of General Directorate of Standardization - ALBANIA (Period 1 July to 31 December 2018) Technical Committee No. 1 “Quality assurance and social responsibility”, 11 standards No. Standard number English title 1. EN ISO 22300:2018 Security and resilience - Vocabulary (ISO 22300:2018) 2. CEN/TS 17159:2018 Societal and citizen security - Guidance for the security of hazardous materials (CBRNE) in healthcare facilities 3. EN ISO 9004:2018 Quality management - Quality of an organization - Guidance to achieve sustained success (ISO 9004:2018) 4. CWA 17145-2:2017 Ethics assessment for research and innovation - Part 2: Ethical impact assessment framework 5. CWA 17145-1:2017 Ethics assessment for research and innovation - Part 1: Ethics committee 6. EN ISO 41011:2018 Facility management - Vocabulary (ISO 41011:2017) 7. EN ISO 41001:2018 Facility management - Management systems - Requirements with guidance for use (ISO 41001:2018) 8. IWA 18:2016 Framework for integrated community-based life-long health and care services in aged societies 9. IWA 16:2015 International harmonized method(s) for a coherent quantification of CO2e emissions of freight transport 10. ISO/IEC Guide 17:2016 ISO/IEC Guide 17:2016Guide for writing standards taking into account the needs of micro, small and medium-sized enterprises 11. ISO 37500:2014 Guidance on outsourcing Technical Committee No. 3 “Electrical and electronical materials”, 59 standards No. Standard number English title 1. EN 50288-12-1:2017 Multi-element metallic cables used in analogue and digital communications and control - Part 12-1: Sectional specification for screened cables characterised from 1 MHz up to 2 000 MHz - 1 Horizontal and building backbone cables 2.
    [Show full text]
  • D955.11 – Report on Existing Standards and Standardization Activities in Crisis Management Sp95 - Impact, Engagement and Sustainability March 2018 (M47)
    D955.11 – REPORT ON EXISTING STANDARDS AND STANDARDIZATION ACTIVITIES IN CRISIS MANAGEMENT SP95 - IMPACT, ENGAGEMENT AND SUSTAINABILITY MARCH 2018 (M47) This project has received funding from the European Union’s 7th Framework Programme for Research, Technological Development and Demonstration under Grant Agreement (GA) N° #607798 DRIVER+ project D955.11 – Report on existing standards and standardization activities in crisis managementD955.11 – Report on existing standards and standardization activities in crisis management March 2018 (M47) Project information Project Acronym: DRIVER+ Project Full Title: Driving Innovation in Crisis Management for European Resilience Grant Agreement: 607798 Project Duration: 72 months (May 2014 - April 2020) Project Technical Coordinator: TNO Contact: [email protected] Deliverable information Deliverable Status: Final Deliverable Title: D955.11 – Report on existing standards and standardization activities in crisis management Deliverable Nature: Report (R) Dissemination Level: Public (PU) Due Date: March 2018 (M47) Submission Date: 02/04/2018 Sub-Project (SP): SP95 - Impact, Engagement and Sustainability Work Package (WP): WP955 - Standardisation activities Deliverable Leader: DIN Reviewers: Francisco Gala, ATOS. Klaudia, Tani, EOS File Name: DRIVER+_D955.11_Report_on_existing_standards_and_standardisation_activitie s_in_crisis_management.docx DISCLAIMER The opinion stated in this report reflects the opinion of the authors and not the opinion of the European Commission. All intellectual property rights are owned by the DRIVER+ consortium members and are protected by the applicable laws. Except where otherwise specified, all document contents are: “©DRIVER+ Project - All rights reserved”. Reproduction is not authorised without prior written agreement. The commercial use of any information contained in this document may require a license from the owner of that information. All DRIVER+ consortium members are also committed to publish accurate and up to date information and take the greatest care to do so.
    [Show full text]
  • Bureau of Standards (BOBS) Head Office: Main Airport Road Plot No
    Bureau of Standards (BOBS) Head Office: Main Airport Road Plot No. 55745 Block 8, Gaborone Private Bag BO 48 Tel: +267 3903200 Fax: +267 3903120 Email: [email protected] Website: www.bobstandards.bw Francistown Branch: Plot 23267 Donga, Adjacent to Metsef Wholesalers Private Bag F465, Francistown Tel: +267 2416232 Fax: +267 2416251 BOBS Standards Work Programme BULLETIN 1 April 2020 – 31 March 2021 [Issue No.26] Gaborone, Botswana Contents International Classification for Standards (ICS).............. 3 List of technical Committees........................................... 5 Draft Botswana Standards.............................................. 8 Project stages table........................................................ 32 International Classification for Standards (ICS) Main ICS Subject Fields 01 Generalities. Terminology. Standardization. Documentation 03 Sociology. Services. Company Organization and Management. Administration. Transport 07 Mathematics. Natural Sciences 11 Health Care Technology 13 Environment and Health Protection. Safety 17 Metrology and Measurement. Physical Phenomena 19 Testing 21 Mechanical Systems and Components for General Use 23 Fluid Systems and Components for General Use 25 Manufacturing Engineering 27 Energy and Heat Transfer Engineering 29 Electrical Engineering 31 Electronics 33 Telecommunications 35 Information Technology. Office Equipment 37 Image Technology 39 Precision Mechanics. Jewellery 43 Road Vehicle Engineering 45 Railway Engineering 47 Ship Building and Marine Structures 49 Aircraft
    [Show full text]
  • DRIVER+ Portfolio of Solutions Database and Guidance Tool
    This project has received funding from the European Union’s 7th Framework Programme for Research, Technological Development and Demonstration under Grant Agreement (GA) N° #607798 DRIVER+ project ◼ D933.21 DRIVER+ PoS database and guidance tool prototypes ◼ July 2019 (M63) Project Acronym: DRIVER+ Project Full Title: Driving Innovation in Crisis Management for European Resilience Grant Agreement: 607798 Project Duration: 72 months (May 2014 - April 2020) Project Technical Coordinator: TNO Contact: Deliverable Status: Final Deliverable Title: D933.21 DRIVER+ PoS database and guidance tool prototypes Deliverable Nature: Prototype (P) Dissemination Level: Public (PU) Due Date: July 2019 (M63) Submission Date: 17/07/2019 Subproject (SP): SP93 - Solutions Work Package (WP): WP933 - DRIVER+ online platforms Deliverable Leader: Denis Havlik, AIT Héctor Naranjo Setién, GMV Reviewers: Maurice Sammels, XVR Erik Vullings, TNO File Name: DRIVER+_D933.21 DRIVER+ PoS database and guidance tool prototypes.docx Version of template used: V2.2 – February 2019 DISCLAIMER The opinion stated in this report reflects the opinion of the authors and not the opinion of the European Commission. All intellectual property rights are owned by the DRIVER+ consortium members and are protected by the applicable laws. Except where otherwise specified, all document contents are: “©DRIVER+ Project - All rights reserved”. Reproduction is not authorised without prior written agreement. The commercial use of any information contained in this document may require a license from the owner of that information. All DRIVER+ consortium members are also committed to publish accurate and up to date information and take the greatest care to do so. However, the DRIVER+ consortium members cannot accept liability for any inaccuracies or omissions nor do they accept liability for any direct, indirect, special, consequential or other losses or damages of any kind arising out of the use of this information.
    [Show full text]
  • ISO 22380:2018 F60cae51f995/Iso-22380-2018
    INTERNATIONAL ISO STANDARD 22380 First edition 2018-08 Security and resilience — Authenticity, integrity and trust for products and documents — General principles for product fraud risk and countermeasures iTeh STANDARD PREVIEW (standards.iteh.ai) ISO 22380:2018 https://standards.iteh.ai/catalog/standards/sist/895afca2-6332-43c3-b3af- f60cae51f995/iso-22380-2018 Reference number ISO 22380:2018(E) © ISO 2018 ISO 22380:2018(E) iTeh STANDARD PREVIEW (standards.iteh.ai) ISO 22380:2018 https://standards.iteh.ai/catalog/standards/sist/895afca2-6332-43c3-b3af- f60cae51f995/iso-22380-2018 COPYRIGHT PROTECTED DOCUMENT © ISO 2018 All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of the requester. ISO copyright office CP 401 • Ch. de Blandonnet 8 CH-1214 Vernier, Geneva Phone: +41 22 749 01 11 Fax:Website: +41 22www.iso.org 749 09 47 Email: [email protected] iiPublished in Switzerland © ISO 2018 – All rights reserved ISO 22380:2018(E) Contents Page Foreword ........................................................................................................................................................................................................................................iv
    [Show full text]
  • R Egist R a T Ion D O Cume Nt
    REGISTRATION DOCUMENT 2014 Summary PRESENTATION OF THE GROUP 5 FINANCIAL STATEMENTS 115 1.1 General overview of the Group 6 1.2 Selected financial information 9 4.1 IFRS consolidated Financial Statements at December 31, 2014 116 1.3 History 12 4.2 Bureau Veritas SA statutory financial statements 184 1.4 The TIC industry 13 4.3 Additional information regarding the Company in 1.5 The Group's competitive advantages 17 view of the approval of the 2014 financial 1.6 Strategy 20 statements 211 1.7 Presentation of business activities 23 1.8 Accreditations, approvals and authorizations 42 1.9 Significant contracts 43 1.10 Research and development, patents and licenses 44 1.11 Information and management systems 44 CORPORATE SOCIAL 1.12 Risk factors 45 RESPONSIBILITY 215 1.13 Legal, administrative, government and arbitration procedures and investigations 54 5.1 Societal information 217 1.14 Insurance 55 5.2 Social information 223 5.3 Health, Safety and Environment 230 5.4 Information gathering methods 236 5.5 Cross-reference index 238 CORPORATE 5.6 Opinion of the independent auditor 240 GOVERNANCE 57 2.1 Corporate Officers and members of the Executive Committee 59 2.2 Report of the Chairman of the Board of Directors 67 INFORMATION ON THE 2.3 Executive officers’ remuneration 84 COMPANY AND THE 2.4 Interests of Executive Corporate Officers, Directors and certain employees 93 CAPITAL 243 6.1 General information 244 6.2 Simplified Group organizational structure as of December 31 245 6.3 Subsidiaries and other equity participations 246 MANAGEMENT REPORT
    [Show full text]
  • Business Continuity and Disaster Recovery Plan for Information Security Vyshnavi Jorrigala St
    St. Cloud State University theRepository at St. Cloud State Culminating Projects in Information Assurance Department of Information Systems 12-2017 Business Continuity and Disaster Recovery Plan for Information Security Vyshnavi Jorrigala St. Cloud State University, [email protected] Follow this and additional works at: https://repository.stcloudstate.edu/msia_etds Recommended Citation Jorrigala, Vyshnavi, "Business Continuity and Disaster Recovery Plan for Information Security" (2017). Culminating Projects in Information Assurance. 44. https://repository.stcloudstate.edu/msia_etds/44 This Starred Paper is brought to you for free and open access by the Department of Information Systems at theRepository at St. Cloud State. It has been accepted for inclusion in Culminating Projects in Information Assurance by an authorized administrator of theRepository at St. Cloud State. For more information, please contact [email protected]. Business Continuity and Disaster Recovery Plan for Information Security by Vyshnavi Devi Jorrigala A Starred Paper Submitted to the Graduate Faculty of Saint Cloud State University in Partial Fulfillment of the Requirements for the Degree, of Master of Science in Information Assurance December, 2018 Starred Paper Committee: Susantha Herath, Chairperson Dien D. Phan Balasubramanian Kasi 2 Abstract Business continuity planning and Disaster recovery planning are the most crucial elements of a business but are often ignored. Businesses must make a well-structured plan and document for disaster recovery and business continuation, even before a catastrophe occurs. Disasters can be short or may last for a long time, but when an organization is ready for any adversity, it thrives hard and survives. This paper will clearly distinguish the difference between disaster recovery plan and business continuity plan, will describe the components of each plan and finally, will provide an approach that organizations can follow to make better contingency plan so that they will not go out of business when something unexpected happens.
    [Show full text]