Page 1286 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

that a flood may strike your facilities.

When you evaluate a firm’s risk of damage from flooding

to develop business continuity and disaster recovery plans, it’s also
a good idea to check with responsible individuals and ensure that
your organization has sufficient insurance in place to protect it
from the financial impact of a flood. In the United States, most
general business policies do not cover flood damage, and you

should investigate obtaining specialized government-backed flood
insurance under FEMA’s National Flood Insurance Program.

Although flooding is theoretically possible in almost any region of the
world, it is much more likely to occur in certain areas. FEMA’s
National Flood Insurance Program is responsible for completing a
flood risk assessment for the entire United States and providing this
data to citizens in graphical form. You can view flood maps online at

http://msc.fema.gov/portal

This site also provides valuable information on recorded earthquakes,

hurricanes, windstorms, hailstorms, and other natural disasters to
help you prepare your organization’s risk assessment.

When viewing flood maps, like the example shown in Figure 18.1,
you’ll find that the two risks often assigned to an area are the “100-
year flood plain” and the “500-year flood plain.” These evaluations
mean that the government estimates chances of flooding in any given
year at 1 in 100 or at 1 in 500, respectively. For a more detailed tutorial

on reading flood maps and current map information, visit
www.fema.gov/media/fhm/firm/ot_firm.htm.