Best Practice Detail

13-8-8549

Network Operators and Service Providers should bring together an ad-hoc team to address the current incident when a Business Recovery Plan (BRP) does not exist. The team should have technical, operations, legal, and public relations representation. Team should be sponsored by senior management and have a direct communication path back to management sponsor. If situation exceeds internal capabilities consider contracting response/recovery options to 3rd party security provider.

Status: Rollover New

References/Comments: IETF RFC2350, CMU/SEI-98-HB-001. Cross reference with 7-7-8549 developed under NRIC.

Historical events:

Network Operators
Service Providers
Cable
Internet/Data
Satellite
Wireless
Wireline
Business Continuity
Cyber Security
Disaster Recovery
Emergency Preparedness
Network Operations
CSRIC VII: Rollover New In CSRIC VII