Previous Topic: Ensure Privacy Within SystemsNext Topic: Consider Coordination and Integration Issues


Prepare a Contingency Plan

Integrity controls can never be completely effective. Even if it were possible to identify every potential risk, the cost of securing against all of them would probably be prohibitive. For this reason, you must establish a contingency plan.

A contingency plan is a set of provisions for events that interrupt or destroy information processing capability.

Contingency handling should be designed into the system. It is too late to start contingency planning when things begin to go wrong.

A contingency plan should contain the following procedures: