Implement Disaster Recovery Processes - Assessment
4 slides · 1 min read · Domain 7
Implement Disaster Recovery Processes
Assessment
As mentioned in earlier topics within this module, there is a fundamental need to calculate the entire, overall impact of the contingency; this includes both the damaging effects of the event itself, as well as the cost of the response efforts.
This assessment is best performed by accounting and audit personnel, with input from subject matter experts (who understand the value of the assets/ resources) and human resources (who have access to time sheets/production hours, for calculating the time taken by all personnel involved in the response, which is a factor in the overall damages).
This assessment can be crucial, depending on the nature of the organization and the event, for reporting purposes after resolution.
Assessments could play an essential role in the following ways
CRIMINAL PROSECUTION
If the event was caused by a criminal act, the state will need to know the extent/amount of damages in order to charge the suspect accordingly.
INFORMING REGULATORS
Depending on the industry and nature of the organization, regulators may require full disclosure of all contingency-related damages.
CIVIL ACTION
If the event was caused by external actors, the organization may want to try to recoup losses through litigation (whether or not the state prosecutes those same external actors). Being able to substantiate the amount of damages with hard data is extremely important in this type of effort.
INVESTOR REPORTING
The organization needs to be able to inform investors about the extent and amount of damages; this is particularly true when required by law (such as for publicly traded corporations).