Kenneth C. Laudon,Jane P. Laudon Management Information System 12th Edition pdf

Business continuity planning

focuses on how the company can restore busi-

ness operations after a disaster strikes. The business continuity plan identifies

critical business processes and determines action plans for handling mission-crit-

ical functions if systems go down. For example, Deutsche Bank, which provides

investment banking and asset management services in 74 different countries, has

a well-developed business continuity plan that it continually updates and refines.

It maintains full-time teams in Singapore, Hong Kong, Japan, India, and Australia

FIGURE 8-3

ACCESS RULES FOR A PERSONNEL SYSTEM

These two examples represent two security profiles or data security patterns that might be found in a

personnel system. Depending on the access rules, a user would have certain restrictions on access to

various systems, locations, or data in an organization.

---

312

Part Two

Information Technology Infrastructure

to coordinate plans addressing loss of facilities, personnel, or critical systems so

that the company can continue to operate when a catastrophic event occurs.

Deutsche Bank’s plan distinguishes between processes critical for business

survival and those critical to crisis support and is coordinated with the company’s

disaster recovery planning for its computer centers. 

Business managers and information technology specialists need to work

together on both types of plans to determine which systems and business

processes are most critical to the company. They must conduct a business

impact analysis to identify the firm’s most critical systems and the impact a

systems outage would have on the business. Management must determine the

maximum amount of time the business can survive with its systems down and

which parts of the business must be restored first.

THE ROLE OF AUDITING

How does management know that information systems security and controls

are effective? To answer this question, organizations must conduct comprehen-

sive and systematic audits. An