Whitman, M. E., Mattord, H. J., & Green, A. (2014). Principles of incident response and disaster recovery (2nd ed.). Boston, MA: Course Technology.

Transcription

1 SEC 4301, IS Disaster Recovery Course Syllabus Course Description Presents disaster recovery and business continuity practices for IS environments. Students develop business continuity documentation and assessments to plan for potential operational recoveries. Course Textbook Whitman, M. E., Mattord, H. J., & Green, A. (2014). Principles of incident response and disaster recovery (2nd ed.). Boston, MA: Course Technology. Course Learning Outcomes Upon completion of this course, students should be able to: 1. Explain the business continuity procedures. 2. Develop an asset ranking report. 3. Develop threat, risk, resource, and impact assessment. 4. Create business continuity plan. 5. Determine alternative operations sites. 6. Develop budget plan for incident response and disaster recovery. Credits Upon completion of this course, the students will earn three (3) hours of college credit. Course Structure 1. Study Guide: Each unit contains a Study Guide that provides students with the learning outcomes, unit lesson, required reading assignments, and supplemental resources. 2. Learning Outcomes: Each unit contains Learning Outcomes that specify the measurable skills and knowledge students should gain upon completion of the unit. 3. Unit Lesson: Each unit contains a Unit Lesson, which discusses lesson material. 4. Reading Assignments: Each unit contains Reading Assignments from one or more chapters from the textbook. 5. Suggested Reading: Suggested Readings are listed in each unit s study guide. Students are encouraged to read the resources listed if the opportunity arises, but they will not be tested on their knowledge of the Suggested Readings. 6. Discussion Boards: Discussion Boards are part of all CSU term courses. More information and specifications can be found in the Student Resources link listed in the Course Menu bar. 7. Unit Assessments: This course contains three Unit Assessments, one to be completed at the end of Units IV-VI. Assessments are composed of written-response questions. 8. Unit Assignments: Students are required to submit for grading Unit Assignments in Units I-IV and VII. Specific information and instructions regarding these assignments are provided below. Grading rubrics are included with each assignment. Specific information about accessing these rubrics is provided below. 9. Final Exam: Students are to complete a Final Exam in Unit VIII. All Final Exams are proctored see below for additional information. You are permitted four (4) hours to complete this exam in the presence of your approved proctor. This is an open-book exam. Only course textbooks and a calculator, if necessary, are allowed when taking proctored exams. The Final Exam is composed of written response questions. SEC 4301, IS Disaster Recovery 1

2 10. Ask the Professor: This communication forum provides you with an opportunity to ask your professor general or course content related questions. 11. Student Break Room: This communication forum allows for casual conversation with your classmates. CSU Online Library The CSU Online Library is available to support your courses and programs. The online library includes databases, journals, e-books, and research guides. These resources are always accessible and can be reached through the library webpage. To access the library, log into the mycsu Student Portal, and click on CSU Online Library. You can also access the CSU Online Library from the My Library button on the course menu for each course in Blackboard. The CSU Online Library offers several reference services. and telephone ( ) assistance is available Monday Thursday from 8 am to 5 pm and Friday from 8 am to 3 pm. The library s chat reference service, Ask a Librarian, is available 24/7; look for the chat box on the online library page. Librarians can help you develop your research plan or assist you in finding relevant, appropriate, and timely information. Reference requests can include customized keyword search strategies, links to articles, database help, and other services. LibGuides Think of a LibGuide (a Library Guide) as a mini-website to help you with your assignments. It has relevant information such as databases, ebooks, and websites specific to your courses. If you have any questions, please reach out to your friendly library staff. Click here for the LibGuide for this course. Unit Assignments Unit I Case Study For the Unit I Case Study, please read the Opening Case Scenario: Pernicious Proxy Probing, which is found on page 2 of your textbook, and the Closing Case Scenario: Pondering People, which starts on page 42. Once you have read and reviewed both case scenarios, address the following issues: 1. Explain the importance of information security at HAL. 2. Other than Tina and JJ, whom should Paul invite to attend this meeting? 3. Describe the role of the organization s security policy during this incident. 4. Why is JJ so concerned about the number of failed login attempts? After all, it seems like no one successfully got into Paul s account. 5. What other information can Paul and his team use to track down what caused this incident? 6. How does the exchange between JJ and Paul indicate that this company has thought about contingency planning? Unit II Case Study For the Unit II Case Study please read the Opening Case Scenario: Proper Planning Prevents Problems, which is found on page 48 of your textbook. Then continue with the Closing Case Scenario: Outrageously Odd Outages, which starts on page 86. Once you have read and reviewed both case scenarios, address the following issues: SEC 4301, IS Disaster Recovery 2

3 1. In the opening scenario, the group was practicing for a snow emergency. Other than power outages, what incident cards would you expect to see? For each of the incident cards you listed, what would be the proper response of the organization? 2. How often should an organization rehearse its contingency plans? 3. Who should coordinate rehearsal of the contingency plans? Why would that be the appropriate person? 4. What degree of cross training between the various roles in the plans is most effective? Identify the advantages and disadvantages of such a cross-training plan. What trade-offs do you think exist between extensive and minimal cross training? 5. Notice that Amanda Wilson was not at this rehearsal. Do you think it is important that the CIO, or even the CEO, participate in this kind of readiness exercise? Why, or why not? 6. How can you make progress in contingency planning in the face of resistance from upper management? Unit III Case Study For the Unit III Case Study please read the Opening Case Scenario: Panicking over Powder, which is found on page 90 of your textbook, and the Closing Case Scenario: Disaster Denied, which is on page 129. Once you have read and reviewed both case scenarios, address the following issues: 1. What other crises or catastrophes can happen in a mailroom that could prompt an emergency procedure like the one illustrated here? 2. What goals should be included when planning for the resumption of critical business functions at an alternate site for four weeks? What would be different if the planning horizon were 30 weeks instead? 3. Describe the impact to data and applications along with recovery efforts at alternate sites for business resumption. 4. When the organization makes a plan like the one described here, what parts of the plan should be from the contingency planning management team (CPMT) and what parts should come from the subject area experts? Unit IV Essay Incident Response Plan Design an incident response plan for your home computer. Include actions to be taken if each of the following events occur: 1. Virus attack 2. Power failure 3. Fire 4. Burst water pipe 5. Internet service provider (ISP) failure SEC 4301, IS Disaster Recovery 3

4 Unit VII Case Study Please read the Opening Case Scenario: Dastardly Disaster Drives Dialing, which is found on page 410 of your textbook. Then continue with the Closing Case Scenario: Smart Susan Starts Studying, which starts on page 436 of your textbook. Once you have read and reviewed both case scenarios, address the following issues: 1. Provide a brief synopsis of the situation. 2. What DR and/or BC activities must be done at this point in order for the organization to resume operations? 3. What challenges does HAL face in its recovery efforts? 4. Who do you think Susan will be calling next, according to her plan? 5. What are the priorities for Susan in the next 30 minutes? APA Guidelines The application of the APA writing style shall be practical, functional, and appropriate to each academic level, with the primary purpose being the documentation (citation) of sources. CSU requires that students use APA style for certain papers and projects. Students should always carefully read and follow assignment directions and review the associated grading rubric when available. Students can find The CSU Citation Guide by clicking here. This document includes examples and sample papers and provides information on how to contact the CSU Writing Center. Grading Rubrics This course utilizes analytic grading rubrics as tools for your professor in assigning grades for all learning activities. Each rubric serves as a guide that communicates the expectations of the learning activity and describes the criteria for each level of achievement. In addition, a rubric is a reference tool that lists evaluation criteria and can help you organize your efforts to meet the requirements of that learning activity. It is imperative for you to familiarize yourself with these rubrics because these are the primary tools your professor uses for assessing learning activities. Rubric categories include: (1) Discussion Board, (2) Assessment (Written Response), and (3) Assignment. However, it is possible that not all of the listed rubric types will be used in a single course (e.g., some courses may not have Assessments). The Discussion Board rubric can be found within Unit I s Discussion Board submission instructions. The Assessment (Written Response) rubric can be found embedded in a link within the directions for each Unit Assessment. However, these rubrics will only be used when written-response questions appear within the Assessment. Each Assignment type (e.g., article critique, case study, research paper) will have its own rubric. The Assignment rubrics are built into Blackboard, allowing students to review them prior to beginning the Assignment and again once the Assignment has been scored. This rubric can be accessed via the Assignment link located within the unit where it is to be submitted. Students may also access the rubric through the course menu by selecting Tools and then My Grades. Again, it is vitally important for you to become familiar with these rubrics because their application to your Discussion Boards, Assessments, and Assignments is the method by which your instructor assigns all grades. Final Examination Guidelines Final Exams are to be administered to students by an approved Proctor. CSU approves two, flexible proctoring options: a standard Proctor, who is chosen by the student and approved by the university, or Remote Proctor Now (RP Now), an ondemand, third-party testing service that proctors examinations for a small fee. SEC 4301, IS Disaster Recovery 4

5 Students choosing RP Now must have an operational webcam/video with audio, a high-speed Internet connection, and the appropriate system rights required to download and install software. To review the complete Examination Proctor Policy, including a list of acceptable Proctors, Proctor responsibilities, Proctor approval procedures, and the Proctor Agreement Form, go to the mycsu Student Portal from the link below. You are permitted four (4) hours to complete this exam in the presence of your approved Proctor. This is an open book exam. Only course textbooks, writing utensils, and a calculator, if necessary, are allowed when taking proctored exams. Other materials are not permitted unless specified in the examination instructions and only the sources identified in the instructions may be used as source material. Communication Forums These are non-graded discussion forums that allow you to communicate with your professor and other students. Participation in these discussion forums is encouraged, but not required. You can access these forums with the buttons in the Course Menu. Instructions for subscribing/unsubscribing to these forums are provided below. Click here for instructions on how to subscribe/unsubscribe and post to the Communication Forums. Ask the Professor This communication forum provides you with an opportunity to ask your professor general or course content questions. Questions may focus on Blackboard locations of online course components, textbook or course content elaboration, additional guidance on assessment requirements, or general advice from other students. Questions that are specific in nature, such as inquiries regarding assessment/assignment grades or personal accommodation requests, are NOT to be posted on this forum. If you have questions, comments, or concerns of a nonpublic nature, please feel free to your professor. Responses to your post will be addressed or ed by the professor within 48 hours. Before posting, please ensure that you have read all relevant course documentation, including the syllabus, assessment/assignment instructions, faculty feedback, and other important information. Student Break Room This communication forum allows for casual conversation with your classmates. Communication on this forum should always maintain a standard of appropriateness and respect for your fellow classmates. This forum should NOT be used to share assessment answers. Grading Discussion Boards 1.25%) = 10% Assessments 8%) = 24% Case Studies 10%) = 40% Unit IV Essay = 10% Final Exam = 16% Total = 100% Course Schedule/Checklist (PLEASE PRINT) The following pages contain a printable Course Schedule to assist you through this course. By following this schedule, you will be assured that you will complete the course within the time allotted. SEC 4301, IS Disaster Recovery 5

6 SEC 4301, IS Disaster Recovery Course Schedule By following this schedule, you will be assured that you will complete the course within the time allotted. Please keep this schedule for reference as you progress through your course. Unit I Introduction to Disaster Recovery Planning (DRP) Chapter 1: An Overview of Information Security and Risk Management Tuesday, Case Study by Tuesday, Unit II Planning for Organizational Readiness Chapter 2: Planning for Organizational Readiness Tuesday, Case Study by Tuesday, Proctor Approval Form Unit III Contingency Strategies for IR/DR/BC Chapter 3: Contingency Strategies for IR/DR/BC Tuesday, Case Study by Tuesday, SEC 4301, IS Disaster Recovery 6

7 SEC 4301, IS Disaster Recovery Course Schedule Unit IV Incident Response: Planning Chapter 4: Incident Response: Planning Chapter 5: Incident Response: Detection and Decision Making Tuesday, Assessment by Tuesday, Essay by Tuesday, Unit V Incident Response: Response Strategies Chapter 7: Incident Response: Response Strategies Tuesday, Assessment by Tuesday, Unit VI Incident Response: Recovery and Maintenance Chapter 8: Incident Response: Recovery and Maintenance Tuesday, Assessment by Tuesday, SEC 4301, IS Disaster Recovery 7

8 SEC 4301, IS Disaster Recovery Course Schedule Unit VII Disaster Recovery: Preparation, Implementation, Operation, and Maintenance Chapter 9: Disaster Recovery: Preparation and Implementation Chapter 10: Disaster Recovery: Operation and Maintenance Tuesday, Case Study by Tuesday, Request to take Final Exam Unit VIII Business Continuity Planning, Crisis Management, and Standards Chapter 11: Business Continuity Planning Chapter 12: Crisis Management and International Standards in IR/DR/BC Tuesday, Final Exam by Tuesday, SEC 4301, IS Disaster Recovery 8