A model supporting Business Continuity auditing & planning in Information Systems

Emmanuele Zambon; Damiano Bolzoni; Sandro Etalle; Marco Salvato

doi:10.1109/ICIMP.2007.4

A model supporting Business Continuity auditing & planning in Information Systems

Emmanuele Zambon, Damiano Bolzoni, Sandro Etalle, Marco Salvato

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

14 Citations (Scopus)

81 Downloads (Pure)

Abstract

One of the main tasks of IT business continuity planning (BCP) is to guarantee that incidents affecting the IT infrastructure do not affect the availability of IT-dependent business processes beyond a given acceptable extent. Carrying out BCP of information systems is particularly challenging, because it has to take into consideration the numerous interdependencies between the IT assets typically present in an organization. In this paper we present a model and a tool supporting BCP auditing by allowing IT personnel to estimate and validate the Recovery Time Objectives (to be) set on the various processes of the organization. Our tool can be integrated in COBIT-based risk assessment applications. Finally, we argue that our tool can be particularly useful for the dynamic auditing of the BCP.

Original language	English
Title of host publication	Second International Conference on Internet Monitoring and Protection (ICIMP)
Place of Publication	Los Alamitos
Publisher	IEEE
Pages	33-33
Number of pages	9
ISBN (Print)	0-7695-2911-9
DOIs	https://doi.org/10.1109/ICIMP.2007.4
Publication status	Published - 1 Jul 2007
Event	2nd International Conference on Internet Monitoring and Protection, ICIMP 2007 - San Jose, United States Duration: 1 Jul 2007 → 5 Jul 2007 Conference number: 2

Conference

Conference	2nd International Conference on Internet Monitoring and Protection, ICIMP 2007
Abbreviated title	ICIMP
Country/Territory	United States
City	San Jose
Period	1/07/07 → 5/07/07

Keywords

SCS-Cybersecurity

Access to Document

10.1109/ICIMP.2007.4

Cite this

@inproceedings{8808a809600e4a6b9ee52ba7fed3abc3,

title = "A model supporting Business Continuity auditing & planning in Information Systems",

abstract = "One of the main tasks of IT business continuity planning (BCP) is to guarantee that incidents affecting the IT infrastructure do not affect the availability of IT-dependent business processes beyond a given acceptable extent. Carrying out BCP of information systems is particularly challenging, because it has to take into consideration the numerous interdependencies between the IT assets typically present in an organization. In this paper we present a model and a tool supporting BCP auditing by allowing IT personnel to estimate and validate the Recovery Time Objectives (to be) set on the various processes of the organization. Our tool can be integrated in COBIT-based risk assessment applications. Finally, we argue that our tool can be particularly useful for the dynamic auditing of the BCP.",

keywords = "SCS-Cybersecurity",

author = "Emmanuele Zambon and Damiano Bolzoni and Sandro Etalle and Marco Salvato",

year = "2007",

month = jul,

day = "1",

doi = "10.1109/ICIMP.2007.4",

language = "English",

isbn = "0-7695-2911-9",

pages = "33--33",

booktitle = "Second International Conference on Internet Monitoring and Protection (ICIMP)",

publisher = "IEEE",

address = "United States",

note = "2nd International Conference on Internet Monitoring and Protection, ICIMP 2007, ICIMP ; Conference date: 01-07-2007 Through 05-07-2007",

}

Zambon, E, Bolzoni, D, Etalle, S & Salvato, M 2007, A model supporting Business Continuity auditing & planning in Information Systems. in Second International Conference on Internet Monitoring and Protection (ICIMP). IEEE, Los Alamitos, pp. 33-33, 2nd International Conference on Internet Monitoring and Protection, ICIMP 2007, San Jose, California, United States, 1/07/07. https://doi.org/10.1109/ICIMP.2007.4

A model supporting Business Continuity auditing & planning in Information Systems. / Zambon, Emmanuele; Bolzoni, Damiano; Etalle, Sandro et al.
Second International Conference on Internet Monitoring and Protection (ICIMP). Los Alamitos: IEEE, 2007. p. 33-33.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - A model supporting Business Continuity auditing & planning in Information Systems

AU - Zambon, Emmanuele

AU - Bolzoni, Damiano

AU - Etalle, Sandro

AU - Salvato, Marco

N1 - Conference code: 2

PY - 2007/7/1

Y1 - 2007/7/1

N2 - One of the main tasks of IT business continuity planning (BCP) is to guarantee that incidents affecting the IT infrastructure do not affect the availability of IT-dependent business processes beyond a given acceptable extent. Carrying out BCP of information systems is particularly challenging, because it has to take into consideration the numerous interdependencies between the IT assets typically present in an organization. In this paper we present a model and a tool supporting BCP auditing by allowing IT personnel to estimate and validate the Recovery Time Objectives (to be) set on the various processes of the organization. Our tool can be integrated in COBIT-based risk assessment applications. Finally, we argue that our tool can be particularly useful for the dynamic auditing of the BCP.

AB - One of the main tasks of IT business continuity planning (BCP) is to guarantee that incidents affecting the IT infrastructure do not affect the availability of IT-dependent business processes beyond a given acceptable extent. Carrying out BCP of information systems is particularly challenging, because it has to take into consideration the numerous interdependencies between the IT assets typically present in an organization. In this paper we present a model and a tool supporting BCP auditing by allowing IT personnel to estimate and validate the Recovery Time Objectives (to be) set on the various processes of the organization. Our tool can be integrated in COBIT-based risk assessment applications. Finally, we argue that our tool can be particularly useful for the dynamic auditing of the BCP.

KW - SCS-Cybersecurity

U2 - 10.1109/ICIMP.2007.4

DO - 10.1109/ICIMP.2007.4

M3 - Conference contribution

SN - 0-7695-2911-9

SP - 33

EP - 33

BT - Second International Conference on Internet Monitoring and Protection (ICIMP)

PB - IEEE

CY - Los Alamitos

T2 - 2nd International Conference on Internet Monitoring and Protection, ICIMP 2007

Y2 - 1 July 2007 through 5 July 2007

ER -

A model supporting Business Continuity auditing & planning in Information Systems

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this