||Lack of Business Recovery Plan: When a Business Recovery Plan (BRP) does not exist, Service Providers and Network Operators should bring together an ad-hoc team to address the current incident. The team should have technical, operations, legal, and public relations representation. Team should be sponsored by senior management and have a direct communication path back to management sponsor. If situation exceeds internal capabilities consider contracting response/recovery options to 3rd party security provider.
||Cable; Internet/Data; Satellite; Wireless; Wireline
||Service Provider; Network Operator
||Business Continuity;Cyber Security;Disaster Recovery;Emergency Preparedness;Network Operations;
||IETF RFC2350, CMU/SEI-98-HB-001. Cross reference with 7-7-8549 developed under NRIC.