Ransom Payments, Criminalizing, Essay Example

List and explain the five considerations in the design of an emergency operations centre.

1. Survivability – The centre must remain operational throughout the disaster period. It needs to be located away from any hazardous areas and not built in a geographical high risk zone e.g. flood area, earthquake, fire, storm centre etc. It requires duel feeds for power, communications and other essential equipment
2. Redundancy- This means adequate back-ups in place like power generators, heating, cooling and water supplies. Adequate high pressure working conditions like air conditioning and ensuring optimum human comfort in the disaster area
3. Communications – There should be adequate layered multiple communication protocols i.e. landlines, cell phones, satellite links, wireless radio links etc. Strength in depth is the key
4. Flexibility of Open Architecture- When designing the emergency operations centre, adequate planning consideration for future requirements need to be made. For example: (i) future space for expansion areas (ii) upgrades to existing technology (iii) different ways of working e.g. robotic applications etc. (iv) design the space to deal with increased capacity.
5. Security – Produce a layered security plan to deal with threat to the facility. For example use of surveillance cameras, gate security and checkpoints, biometric devices for entry, access control, and use of appropriate armaments for security personnel. (Holderman, 2010)

Discuss the Pros and Cons of refusing to pay a ransom demand

Source : (IDEA, 2010)

List five justifications for a business continuity plan

3. Protection – You need to protect the business from threat of such items like fire, flooding, earthquake, power outages or other serious business disruptions. In addition to recovering from a disaster you require a plan in order to continue business. A long period of disruption without an adequate BC plan could have a serious impact on the financial viability of the Company and in the worst case bankruptcy.
4. Minimize risk – The Directors have both a responsibility to the shareholders and its customers to minimize risk and potential financial losses. A demonstrated BC plan build confidence in the Organization and the management team.  This is particularly important in the Financial Services and stock market business where millions of $ could be lost by just several hours of disruption
5. Financial justification – Insurance premiums are likely to be lower for those with a demonstrated BC plan. This provides better risk mitigation for the underwriting companies where they can see a proactive organization that has taken steps to address a potential disaster threat situation.
6. Competitive edge – Customers are more likely to deal with organizations that show concern for their needs and protection of their assets. This can provide competitive edge over those who do not adopt BC planning. The Financial Services industry being a particular case in point
7. Failure to plan – “Failure to plan could be disastrous. At best you risk losing customers while you’re getting your business back on its feet. At worst your business may never recover and may ultimately cease trading.” (Cranfield University, School of Management, 2010)
8. Contrast Business Impact Analysis with Risk Analysis

Business Impact Analysis

Business Impact Analysis may be defined as “A management level analysis, which identifies the impacts of losing company resources. The BIA measures the effect of resource loss and escalating losses over time, in order to provide senior management with reliable data upon which to base decisions on risk mitigation and continuity planning. …” (State of Minnesota, 2010).  It considers the fact of Information Systems services not being available and what constitutes the minimum amount of services required in order to keep the organization operational or functional.

Risk Analysis

Risk Analysis may be defined as “the process of defining and analyzing the dangers to individuals, businesses and government agencies posed by potential natural and human-caused adverse events. In IT, a risk analysis report can be used to align technology-related objectives with a company’s business objectives. A risk analysis report can be either quantitative or qualitative.” (Market Security, 2009).  Risk Assessment is used in the compilation of Disaster Recovery and Business Continuity Planning Analysis. It is also used in Project Management where it is necessary to identify potential threats or risks to a project and build suitable mitigation statements that are executed through the Project Plan

Works Cited

Cranfield University, School of Management. (2010). Crisis management and business continuity planning. Retrieved 10 21, 2010, from Business Link: http://www.businesslink.gov.uk/bdotg/action/detail?type=RESOURCES&itemId=1074463289

Holderman, E. (2010). EOC Design considerations. Retrieved 10 21, 2010, from Disaster Resource: http://www.disaster-resource.com/articles/08p_136.shtml

IDEA. (2010, 5 31). Ransom Payments, criminalising. Retrieved 10 21, 2010, from IDEA: http://www.idebate.org/debatabase/topic_details.php?topicID=929

Market Security. (2009, 3 11). Risk Assessments. Retrieved 10 21, 2010, from Market Security: http://searchmidmarketsecurity.techtarget.com/sDefinition/0,,sid198_gci1182538,00.html

State of Minnesota. (2010). BCM Glossary . Retrieved 10 20, 2010, from Office of Enterprise Technology: http://www.state.mn.us/portal/mn/jsp/content.do?agency=OETweb&action=content&contenttype=EDITORIAL&contentkey=BCM_Glossary_051806082957