Business Continuity Planning Essay

Submitted By ousamaz18
Words: 1931
Pages: 8
Open Document
P3.1 -DATA PROTECTION
TASK 1 - PRODUCE A REPORT DESCRIBING THE
RISKS AND THE MEASURES EMPLOYEES/EMPLOYERS
NEED TO CONSIDER WHEN DEALING WITHIN DATA
HELD

Legal issuesData protection ActData protection act is a Law created to protect information and data as During the second half of the
20th century many businesses, government and organisations started using computers to keep information about their customers as well as employees on either spreadsheets or databases. Some of the information they started taking record of were for example, Name, Address as well as Contact details and many more. As there is a growing number amount of companies doing this this has been seen as a target from many hackers and thieves as they seek to steal information from the database for example getting somebody's credit card details in order to steal their money and commit fraud.
Freedom of Information Act 2000
The Freedom of Information Act 2000 allows access to the members of the public with request
It is done in two way’s:
Public authorities have the power to publish certain information about their activities; and
members of the public are allowed to request information from public authorities.
Copyright considerations: The copyright normally is owned by to the author but can be given to someone else or to a company provided there is written agreement between the researcher and when it was given away. As well as this it must also include where the research has been sponsored or part by an institute or company which has asked or requested of use of whatever is owned by another party . If an institution employs the founder of the work or the creator during work means the copyright automatically belongs to the employer unless there has been a contract signed by both groups stating opposite. In this situation you would need to obtain permission of the copyright holder.


Legal issues:

Risks of dealing with employees data.
Theft
There are a number of attacks that are carried out which is targeted towards businesses or major firms which holds the data of potentially thousands of employers which could land them an incredible amount of money and confidential data. Most data breaches are reported by colleges and universities as a result of theft. swell as this reports have also found that a lot of hackers or thieves tend to be Former employees or people work on the inside but are working with a group of others to ensure they are successful They try to make money from the sale of the data held and will look for other stored on hard drives, and laptops as well as local storage. Institute. Employers have to be sure of the security available when taking peoples personal data because it could result in legal issues and end up being sued therefore losing a lot of money because of lacking security for employees
Loss
Backup tapes or paper files being misplaced on their way to a storage facility, or laptops left behind at airports or in taxis, are common ways data can end up in the hands of unauthorized people.
Neglect
When old computers or hard drives are sold or recycled, the information contained on them might be deleted, but if not properly removed , that data can be retrieved by anyone with just a few cheap tools.
Additionally, leaving data on media that is not protected with a strong password or with encryption leaves it vulnerable to a hacker or thief. This also applies to paper files, which should be rid using a shredder or a recycling service that ensures proper disposal.
Insecure Practices
Collecting, storing, sending, encrypting, finding and removing data may all have problems for its safety.
Those who are handling sensitive data, may find they are doing one or more of these activities. If proper safety procedures are not taken, data exposure could be the result. For example, breaches of confidential data stored in folders able to access through the Internet, such as through file sharing software.



Ethical Issues
Examples of ethical
Show More

Related Documents: Business Continuity Planning Essay

Winning: Business Continuity Planning Essay

(NOC) • Secured Monitoring Location • Qdata had not been quick to invest in advanced technology and had been experienced difficulty in retaining staff PEOPLE BOB Turley- CIO Joanne Ripley – technical operations team lead Wanda Spangler – VP business developments Leon Ledbetter – Ops Jack Samuelson – CEO Tim Mandel – CTO Peter Stwart – legal counsel • 4:31 AM: Leon Ledbetter reports the website is locked up, customer support is receiving calls and support has been getting “ha” emails…

Words 966 - Pages 4

Business Continuity Planning and Data White-hat Hackers Essay

Grey-box testing Risk Management - Directly affects security controls BCP - Is not part of quantitative risk assessment Primary components of Risk Management - Reduction, Avoidance, Mitigation Planning for Disasters - part of business continuity management (BCM), which includes both: BCP and DRP Business Impact Analysis (BIA) - determines the extent of the impact that a particular…

Words 628 - Pages 3

Essay on Network: Business Continuity Planning and Best Practice Result

system Business Continuity Planning Lab #6. A risk assessment is a process to identify potential hazards and analyze what could happen if a hazard occurs. A business impact analysis (BIA) is the process for determining the potential impacts resulting from the interruption of time sensitive or critical business processes. A business continuity plan is a roadmap for continuing operations under adverse conditions such as a storm or a crime. A disaster recovery plan, is a plan for business continuity…

Words 643 - Pages 3

Essay about 9781423901693 PPT Ch05

4 Ensuring that an Organization Achieves Good Value from its Investments in IT • Many parts of the organization could not operate without IT • Governance must be applied to the management of IT – Effective IT strategic planning process ensures close alignment between business and IT goals – Apply good project management principles Guide to Microsoft Virtual PC 2005 and Virtual Server 2007 5 Mitigating IT-Related Risks • Use good internal controls and management accountability • Internal control…

Words 1351 - Pages 6

Incident Response Process Paper

Continuity planning is a must for businesses in case of a catastrophic failure and their network and systems would go down. Continuity planning has three core components: incident response process (IR), disaster recovery plan (DR), and a business continuity plan (BC). Each one of these components plays a different role in making sure a business is prepared for the worst. Incident response process Incident response is needed so there will be an organized approach to address and manage a cyber attack…

Words 465 - Pages 2

Case Study Itgc Area

ITGC Area Summary of Issue Strength or Weakness IT Management FFC has an IT strategic plan Strength IT Management CIO reports only to the Chief Financial Officer Weakness IT Management Applications, Operations, Information Security, and Database Administration are reported to the CIO Weakness IT Management FFC has an IT steering committee – 1. the Senior Vice President (SrVP) and Chief Information Officer (CIO) 2. the VP, Applications 3. the VP, Data Base Administration (DBA) 4. the VP, Operations…

Words 1312 - Pages 6

Business Impact Assessment Essay

DISCUSSION PAPER Topic: Business Impact Analysis/Assessments 1.0 PURPOSE OF BUSINESS IMPACT ASSESSMENT A business impact assessment (BIA), also called a business impact analysis, is a study of an organization’s functions for the purpose of estimating how well or poorly it can be expected to perform if its operations are disrupted. A BIA establishes a more rigorously defendable baseline for deciding how much continuity planning should be developed. Many continuity planners encounter the dilemma…

Words 1836 - Pages 8

Disaster Recovery

Disaster recovery plan forms a big part of the business continuity plan. When an unforeseen event takes place and brings day to day operations to a pause where an organization needs to recover as quickly as possible to continue business operation. It is important for organization to have disaster recovery plan in place, in abstance of this can put organization at risk of high financial costs, reputation loss or even a greater risk of losing its clients and customers. Implementing disaster recovery…

Words 618 - Pages 3

Essay _lit1_task_310.1.2-01-06

LIABILITY- The owner assumes all liability of the business, they are the same entity. The owner’s personal assets are at risk in the event the business has debts that it cannot pay. • INCOME TAXES- Profits and losses are treated as personal income and are claimed on the owners individual income taxes. • LONGEVITY/CONTINUITY- This business can exist as long as the owner is alive. Since the business and owner are the same entity if the owner dies the business ceases to exist. • CONVENIENCE/BURDEN- This…

Words 1163 - Pages 5

Is3350 Unit 3 Individual Assignment

BIA is also required to identify outside and inside personnel which expertise is crucial when the unthinkable happens (Gelbstein, 2013). Business managers are required to get involved in the BIA analysis and impacts can be : Operational (customers, suppliers, competitors advantages), Financial (revenue reduced because loss of delivery for services), Contractual and legal (contracts not respected)…

Words 635 - Pages 3