Instructions • Note that unless otherwise specified, all textbook references are to Principles of Incident Response and Disaster Recovery (second edition). . • Watch your spelling and grammar; you wi

Instructions •

Note that unless otherwise specified, all textbook references are to Principles of Incident Response and Disaster Recovery (second edition). 

. • Watch your spelling and grammar; you will lose marks for spelling and grammar mistakes. 

• Make sure you follow the length guidelines provided - there will be a grade penalty for your answers being longer than these guidelines (up to 50%). Note that all guidelines assume single spacing and 12 point font.

 1- Assume that you have been hired by a small to medium organization to help them prepare a contingency planning document. You may choose any organization (or practice). Some examples are: clinic, veterinary practice, credit union, tax preparation office, event management company, accounting firm, real state agency, etc… (Please DO NOT use an ISP as your organization) 

2- To help with the preparation of the business contingency document, you conduct a Business Impact Analysis (BIA), following the BIA three stages: 

1. Stage 1: Assessing mission critical /business processes and recovery criticality (limit the number of business processes to 5 only). 

2. Out of the list in the previous step, choose 2 business missions that are related to information technology and information security. 

3. Stage 2: Identifying resource requirements per mission process. 

4. Stage 3: Identifying recovery priorities per mission process. 

3- Use NIST SP800-34-Rev1-BIA-Template to prepare the BIA . The template file is provided with this assignment, and available at 

https://csrc.nist.gov/CSRC/media/Publications/sp/800-34/rev-1/final/documents/sp800-34- rev1_bia_template.docx ). 

4- Your completed BIA should not exceed 6 pages