Your browser has JavaScript turned off.
You must turn it on to proceed.










NORS -- CSRIC Best Practices Result

CSRIC Best Practices Result

Detailed Information for the Best Practice: 9-8-8549

Number 9-8-8549
Priority Critical
Description Lack of Business Recovery Plan: When a Business Recovery Plan (BRP) does not exist, Service Providers and Network Operators should bring together an ad-hoc team to address the current incident. The team should have technical, operations, legal, and public relations representation. Team should be sponsored by senior management and have a direct communication path back to management sponsor. If situation exceeds internal capabilities consider contracting response/recovery options to 3rd party security provider.
Network Type(s) Cable; Internet/Data; Satellite; Wireless; Wireline
Industry Role(s) Service Provider; Network Operator
Keyword(s) Business Continuity;Cyber Security;Disaster Recovery;Emergency Preparedness;Network Operations;
Reference/Comments IETF RFC2350, CMU/SEI-98-HB-001. Cross reference with 7-7-8549 developed under NRIC.