Term Paper: Contingency Planning in Action
Due Week 10 and worth 200 points
Create a hypothetical organization with details including geographic location(s), number of employees in each location, primary business functions, operational and technology details, potential threats to the business and its technology, and anything else that you believe is relevant to the business.
Assume this organization is lacking in its contingency planning efforts and requires assistance in ensuring these efforts are appropriately addressed to increase its overall security and preparedness posture.
Write a ten to fifteen (10-15) page paper in which you:
- Provide an overview of the organization and indicate why contingency planning efforts are needed and how these efforts could benefit the business.
- Develop a full contingency plan for the organization. Include all subordinate functions / sub plans, including BIA, IRP, DRP, and BCP efforts.
- Determine the policies and procedures that would be needed for all contingency planning efforts. Detail the role of the policy / procedure, and explain how each would help achieve the goals of these efforts.
- Detail the processes to utilize in order to fully implement the contingency plan and its components, and explain the efforts to consider in maintaining the plans.
- Create a hypothetical incident scenario where the contingency planning efforts would need to be utilized and detail: a. How the plan is sufficiently equipped to handle the incident. b. a timeline for the incident response and recovery efforts.
- Identify any ethical concerns that are specific to this organization and its incident response personnel (especially the CP Team Leader), and explain how to plan for these concerns.
- Use at least five (5) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
- Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
- Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
The specific course learning outcomes associated with this assignment are:
- Explain risk management in the context of information security.
- Develop a disaster recovery plan for an organization.
- Summarize the various types of disasters, response and recovery methods.
- Compare and contrast the methods of disaster recovery and business continuity.
- Explain and develop a business continuity plan to address unforeseen incidents.•Describe crisis management guidelines and procedures.
- Describe detection and decision-making capabilities in incident response.
- Develop techniques for different disaster scenarios.
- Evaluate the ethical concerns inherent in disaster recovery scenarios.
- Use technology and information resources to research issues in disaster recovery.
- Write clearly and concisely about disaster recovery topics using proper writing mechanics and technical style conventions.
Grading for this assignment will be based on answer quality, logic / organization of the paper, and language and writing skills, using the following rubric.
Points: 200 | Term Paper: Contingency Planning in Action | ||||
Criteria |
Unacceptable Below 60% F | Meets Minimum Expectations 60-69% D |
Fair 70-79% C |
Proficient 80-89% B |
Exemplary 90-100% A |
1. Provide an overview of the organization and indicate why contingency planning efforts are needed and how these efforts could benefit the business. Weight: 10% | Did not submit or incompletely provided an overview of the organization and did not submit or incompletely indicated why contingency planning efforts are needed and how these efforts could benefit the business. | Insufficiently provided an overview of the organization and insufficiently indicated why contingency planning efforts are needed and how these efforts could benefit the business. | Partially provided an overview of the organization and partially indicated why contingency planning efforts are needed and how these efforts could benefit the business. | Satisfactorily provided an overview of the organization and satisfactorily indicated why contingency planning efforts are needed and how these efforts could benefit the business. | Thoroughly provided an overview of the organization and thoroughly indicated why contingency planning efforts are needed and how these efforts could benefit the business. |
2. Develop a full contingency plan for the organization. Include all subordinate functions / sub plans, including BIA, IRP, DRP, and BCP efforts. | Did not submit or incompletely developed a full contingency plan for the organization. Did not submit or incompletely included all subordinate functions / sub plans, including BIA, IRP, DRP, and BCP efforts. | Insufficiently developed a full contingency plan for the organization. Insufficiently included all subordinate functions / sub plans, including BIA, IRP, DRP, and BCP efforts. | Partially developed a full contingency plan for the organization. Partially included all subordinate functions / sub plans, including BIA, IRP, DRP, and BCP efforts. | Satisfactorily developed a full contingency plan for the organization. Satisfactorily included all subordinate functions / sub plans, including BIA, IRP, DRP, and BCP efforts. | Thoroughly developed a full contingency plan for the organization. Thoroughly included all subordinate functions / sub plans, including BIA, IRP, DRP, and BCP efforts. |
3. Determine the policies and procedures that would be needed for all contingency planning efforts. Detail the role of the policy / procedure and explain how each would help achieve the goals of these efforts. Weight: 10% | Did not submit or incompletely determined the policies and procedures that would be needed for all contingency planning efforts. Did not submit or incompletely detailed the role of the policy / procedure and did not submit or incompletely explained how each would help achieve the goals of these efforts. | Insufficiently determined the policies and procedures that would be needed for all contingency planning efforts. Insufficiently detailed the role of the policy / procedure and insufficiently explained how each would help achieve the goals of these efforts. | Partially determined the policies and procedures that would be needed for all contingency planning efforts. Partially detailed the role of the policy / procedure and partially explained how each would help achieve the goals of these efforts. | Satisfactorily determined the policies and procedures that would be needed for all contingency planning efforts. Satisfactorily detailed the role of the policy / procedure and satisfactorily explained how each would help achieve the goals of these efforts. | Thoroughly determined the policies and procedures that would be needed for all contingency planning efforts. Thoroughly detailed the role of the policy / procedure and thoroughly explained how each would help achieve the goals of these efforts. |
4. Detail the processes to utilize in order to fully implement the contingency plan and its components and explain the efforts to consider in maintaining the plans. Weight: 10% | Did not submit or incompletelydetailed the processes to utilize in order to fully implement the contingency plan and its components and did not submit or incompletely explained the efforts to consider in maintaining the plans. | Insufficiently detailed the processes to utilize in order to fully implement the contingency plan and its components and insufficiently explained the efforts to consider in maintaining the plans. | Partially detailed the processes to utilize in order to fully implement the contingency plan and its components and partially explained the efforts to consider in maintaining the plans. | Satisfactorily detailed the processes to utilize in order to fully implement the contingency plan and its components and satisfactorily explained the efforts to consider in maintaining the plans. | Thoroughly detailed the processes to utilize in order to fully implement the contingency plan and its components and thoroughly explained the efforts to consider in maintaining the plans. |
5a. Create a hypothetical incident scenario where the contingency planning efforts would need to be utilized and detail how the plan is sufficiently equipped to handle the incident. Weight: 10% | Did not submit or incompletely created a hypothetical incident scenario where the contingency planning efforts would need to be utilized and did not submit or incompletely detailed how the plan is sufficiently equipped to handle the incident. | Insufficiently created a hypothetical incident scenario where the contingency planning efforts would need to be utilized and insufficiently detailed how the plan is sufficiently equipped to handle the incident. | Partially created a hypothetical incident scenario where the contingency planning efforts would need to be utilized and partially detailed how the plan is sufficiently equipped to handle the incident. | Satisfactorily created a hypothetical incident scenario where the contingency planning efforts would need to be utilized and satisfactorily detailed how the plan is sufficiently equipped to handle the incident. | Thoroughly created a hypothetical incident scenario where the contingency planning efforts would need to be utilized and thoroughly detailed how the plan is sufficiently equipped to handle the incident. |
5b. Create a hypothetical incident scenario where the contingency planning efforts would need to be utilized and detail a timeline for the incident response and recovery efforts. Weight: 10% | Did not submit or incompletely created a hypothetical incident scenario where the contingency planning efforts would need to be utilized and did not submit or incompletely detailed a timeline for the incident response and recovery efforts. | Insufficientlycreated a hypothetical incident scenario where the contingency planning efforts would need to be utilized and insufficiently detailed a timeline for the incident response and recovery efforts. | Partiallycreated a hypothetical incident scenario where the contingency planning efforts would need to be utilized and partially detailed a timeline for the incident response and recovery efforts. | Satisfactorilycreated a hypothetical incident scenario where the contingency planning efforts would need to be utilized and satisfactorily detailed a timeline for the incident response and recovery efforts. | Thoroughlycreated a hypothetical incident scenario where the contingency planning efforts would need to be utilized and thoroughly detailed a timeline for the incident response and recovery efforts. |
6. Identify any ethical concerns that are specific to this organization and its incident response personnel (especially the CP Team Leader), and explain how to plan for these concerns. Weight: 10% | Did not submit or incompletelyidentified any ethical concerns that are specific to this organization and its incident response personnel (especially the CP Team Leader), and did not submit or incompletely explained how to plan for these concerns. | Insufficientlyidentified any ethical concerns that are specific to this organization and its incident response personnel (especially the CP Team Leader), and insufficiently explained how to plan for these concerns. | Partiallyidentified any ethical concerns that are specific to this organization and its incident response personnel (especially the CP Team Leader), and partially explained how to plan for these con cerns. | Satisfactorilyidentified any ethical concerns that are specific to this organization and its incident response personnel (especially the CP Team Leader), and satisfactorily explained how to plan for these concerns. | Thoroughlyidentified any ethical concerns that are specific to this organization and its incident response personnel (especially the CP Team Leader), and thoroughly explained how to plan for these concerns. |
7. 5 references Weight: 5% | No references provided | Does not meet the required number of references; all references poor quality choices. | Does not meet the required number of references; some references poor quality choices. | Meets number of required references; all references high quality choices. | Exceeds number of required references; all references high quality choices. |
8. Clarity, writing mechanics, and formatting requirements Weight: 10% | More than 8 errors present | 7-8 errors present | 5-6 errors present | 3-4 errors present | 0-2 errors present |