Whenever I teach a BC/DR Plan Development Workshop, we always talk about phone system failure or circuit outages. Everyone tells me that it is not a big deal, they can call my cell phone.

Bad answer.

Read here for a real life situation

In an earlier post the new regarding the network admin and the City of San Francisco was brought to light. Today's article exposes some of the details regarding this situation.

Every CEO needs to have administrator credentials to EVERY system in the firm. END OF STORY! There is no excuse for flunking Executive Password Management 101.

It is like putting a huge portion of the firm's money into an account that only 1 mid level employee has total control over.

Read about it here

This is a great report and highlights the issue that allowing people to do things because it is convenient can create huge security risks. Please take the time to read this report and really look at your firms security risks.

This is an issue that is covered in the Framework IT BC/DR Plan Development Workshop and in Surivior or Statistic our new Plan Development software.

Read the article here

How does this happen? Lax security and oversight. This is inexcusable but happens for too often. Part of a thorough Business Continuity and Disaster Recovery Plan is a security review and password management. A good password policy will mitigate the possibility of a situation such as this happening.

Read the entire article here

Ever wonder how that virus got on the server? Well, let's say Jim uses his little thumb drive to grab a gig of files and takes them home for the weekend. Jim is a great employee to work over the weekend!

But Jim's computer at home isn't getting the new anti-virus signature files or the MS OS updates. Jim's home computer is infected. Sunday night Jim puts a gig of infected files on his thumb drive and gets ready to go to work.

Now, Monday morning and Jim loads those files on his machine and shares the thumb drive with his buddies.

So, how do you prevent these things? This is a classic business interruption a disaster in the making.