Page 1295 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

backup sites are ready to assume primary status at a moment’s

notice.

Strikes/Picketing

When designing your business continuity and disaster recovery plans,
don’t forget about the importance of the human factor in emergency

planning. One form of man-made disaster that is often overlooked is
the possibility of a strike or other labor crisis. If a large number of your
employees walk out at the same time, what impact would that have on
your business? How long would you be able to sustain operations
without the regular full-time employees that staff a certain area? Your
BCP and DRP teams should address these concerns and provide

alternative plans should a labor crisis occur.

Theft/Vandalism

Earlier, we talked about the threat that terrorist activities pose to an
organization. Theft and vandalism represent the same kind of threat
on a much smaller scale. In most cases, however, there’s a far greater
chance that your organization will be affected by theft or vandalism
than by a terrorist attack. Insurance provides some financial

protection against these events (subject to deductibles and limitations
of coverage), but acts of this kind can cause serious damage to your
business, on both a short-term and a long-term basis. Your business
continuity and disaster recovery plans should include adequate
preventive measures to control the frequency of these occurrences as
well as contingency plans to mitigate the effects theft and vandalism
have on ongoing operations.

Theft of infrastructure is becoming increasingly common

as scrappers target copper in air-conditioning systems, plumbing,

and power subsystems. It’s a common mistake to assume that fixed
infrastructure is unlikely to be a theft target.