Page 1291 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

advised to check your policies and contact your insurance
professionals to ensure that you’re still covered.

Terrorist acts pose a unique challenge to DRP teams because of their
unpredictable nature. Prior to the September 11, 2001, terrorist

attacks, few DRP teams considered the threat of an airplane crashing
into their corporate headquarters significant enough to merit
mitigation. Many companies are asking themselves a number of “what
if” questions regarding terrorist activity. In general, these questions
are healthy because they promote dialogue between business elements
regarding potential threats. On the other hand, disaster recovery

planners must emphasize solid risk-management principles and
ensure that resources aren’t overallocated to terrorist threats to the
detriment of other DRP/BCP activities that protect against more likely
threats.

Bombings/Explosions

Explosions can result from a variety of man-made occurrences.
Explosive gases from leaks might fill a room/building and later ignite

and cause a damaging blast. In many areas, bombings are also cause
for concern. From a disaster planning perspective, the effects of
bombings and explosions are like those caused by a large-scale fire.
However, planning to avoid the impact of a bombing is much more
difficult and relies on physical security measures we cover in Chapter
10, “Physical Security Requirements.”

Power Outages

Even the most basic disaster recovery plan contains provisions to deal

with the threat of a short power outage. Critical business systems are
often protected by uninterruptible power supply (UPS) devices to keep
them running at least long enough to shut down or long enough to get
emergency generators up and working. Even so, could your
organization keep operating during a sustained power outage?

After Hurricane Harvey made landfall in 2017, millions of people in
Texas lost power. Does your business continuity plan include

provisions to keep your business viable during such a prolonged