Developing the Forensics, Continuity, Incident Management, and Case Study

Developing the Forensics, Continuity, Incident Management, and Security Training Capacities for the Enterprise - Case Study Example Information security involves safeguarding the integrity, confidentiality and the availability of information either in electronic or print form while information policy assurance is the practice of managing the risk associated with such data. In any organization business continuity plan is crucial to provide a foundation for prevention and recovery from natural and non-natural disaster. Resource allocation therefore constitutes the backbone of the business continuity process. The organization should incorporate realistic and practical ways of resolving the important resource allocation issues that are most likely to impact it. This includes the people, places and things. People includes the employees, insiders, customers, vendors, institution-affiliated and third-party service providers. The places are the facilities that the institution owns, manages, maintains and controls while things is comprised of the assets, equipments, supplies, records and documents available to an organization (Watters, 2010). An effective and credible business continuity plan is developed in a series of steps. Business impact analysis is done to identify the sensitive and crucial business functions and the resources that support them. This process outlines the effects resulting from the interruption of normal business functions and the recovery priorities and strategies (Gerard Blokdijk, 2008). The information is used to decide on the resources to be allocated to the process. Appropriate delegation of planning activities and the involvement of the top and lower management personnel in the implementation of a BCPhas been observed to significantly yield positive results. According to the 2005 Business Continuity Survey by CPM and Deloitte, involvement of junior staff eliminates the otherwise casual approach towards the BCP and improves the response time. After an impact analysis has been