Responses to Attacks

Responding to Attacks on Computers

Threats to an organization’s computer systems come from a variety of sources. The motivations for computer attacks are as different as the attackers themselves. For example, a group of organized criminals may carefully execute an attack on your computer system, hoping to gain confidential information they can sell to competitors or use to extort money from your organization. Industrial spies may try to steal a company’s secret plans for a new product. Cyber-terrorists with political or religious motivations may attack an organization or government with which they disagree. Amateur hackers may access systems to plant their virtual flag and earn merit badges in the hacker community. Occasionally, bored teenagers may hack into a system just to prove they can.

Cybercrimes have a direct impact on privacy. An organization’s failure to adequately protect information can lead to disaster, so the necessity for good data security is absolute, and a fiduciary responsibility of corporate management. However, even though data security and privacy have a relationship, the concept and practice of data security is generally geared toward restricting data access. This restriction does not automatically safeguard the privacy of users. If organizational policies on the use or sale of sensitive information are not appropriate, privacy problems can still surface, even though the information and technology are secure.

In many ways, IT security specialists are at a disadvantage in their struggle against hackers. Attackers can mount assaults at their leisure, and can choose their targets at will. IT workers don’t enjoy the same luxury—they can never let their guard down, and must keep their systems secure at all times.

The adverse impact of a hacking attack or intrusion can be described in terms of the following losses: loss of integrity, loss of availability, loss of confidentiality.

Requirements for Special Needs

Hazardous Materials – Hazardous materials can create disasters at a facility, and they can compound problems caused by an unrelated disaster. Hazardous materials include explosives, flammable and combustible substances, poisons, and radioactive materials. These materials can explode, intensify fires, and release toxic fumes when burning. They can contaminate and injure employees and emergency responders.

Art, Antiques and Collectables – Dealing with art, antiques, and collectibles during a disaster requires specific procedures. For example, these items may need to be removed from a facility and restored, which requires the services of specialized contractors. If art, antiques, and collectibles are destroyed or damaged beyond repair, insurance companies may require complete documentation about their purchase, condition, and appraised value. This documentation should be kept off site, and should include receipts, appraisal reports, and photographs.

Historic Documents – Historic preservation is an eclectic activity that spans public, private, and nonprofit industries. Many organizations possess valuable documents that describe their own history or that of the surrounding community. In long-established organizations, most employees may have no idea that such documents even exist.

Trade Secrets (Proprietary Information) – Disaster recovery planning that has occurred since the 2001 terrorist attacks has focused on saving lives, and rightfully so. However, organizations must also protect their intellectual property. Trade secrets and proprietary processes are some of the most valuable assets a company can have.

Summary

Arguably one of the most important aspects of the recovery plan are the steps to mitigate or minimize the impact of the disaster. Many of these steps, like those described are common practices for managing assets or business processes. Good pre-planning is often the difference between returning to normalcy quickly with minimal impact or slowly with significant impact on the enterprise.