Disaster Recovery Planning (DRP) in Information Security (By considering latest DRP standards and technologies recommended by ISO 22301)

Assessment 2

Assessment type: Written Case Study- Individual assessment

Assessment purpose: The purpose of this assessment is to critically analyse and evaluate an organization's
disaster recovery planning (DRP) process within the context of information security. Students will explore how organizations can prepare for, respond to, and recover from disasters that impact their information security infrastructure. Based on learning from exploration, then they will assume an organization and will make DRP for that organization. The assessment will involve analysing real-world use cases, identifying strengths and weaknesses in existing DRP processes, and proposing improvements based on current best practices and theoretical frameworks.

Value: 30%
Due date: Week 7

Assessment Topic: Disaster Recovery Planning (DRP) in Information Security (By considering latest DRP standards and technologies recommended by ISO 22301)

Task details:
In this assessment, you are required to write a detailed case study (minimum of 3000 words) that critically analyses the disaster recovery planning process in an organization, specifically focusing on information security. Students will present the case study in the class in week 8 and questions will be asked. Based on the answers, students will be evaluated. Your case study report should cover the following sections:

1. Introduction to Disaster Recovery Planning (DRP) (5 marks):
a. Define DRP and its importance in the context of information security.
b. Discuss the key components of a DRP and how it integrates with overall business continuity planning (BCP).
2. Case Studies and Use Cases (10 marks):
a. Present at least three real-world use cases or case studies of organizations that have implemented DRP for information security.
b. Analyse the effectiveness of the DRP in each case, identifying successes and failures.
C. Highlight the lessons learned from each case study.
3. Critical Analysis (7 marks):
a. Evaluate the DRP process used in the case studies.
b. Discuss the risks and challenges associated with DRP in information security.
C. Compare and contrast the different approaches taken by the organizations in the use cases.
4. Recommendations for Improvement (5 marks):
a. Based on your analysis, propose recommendations for enhancing the DRP process in the organizations studied.
b. Suggest best practices and innovative approaches that could improve DRP in information security.
5. Presentation and Conclusion (3 marks):
a. Summarize your findings and emphasize the importance of an effective DRP in maintaining information security.
b. Reflect on the potential consequences of inadequate DRP planning in today's digital environment.
Submission requirements details: Students are required to submit their assessment through the Moodle platform in a Word document or PDF format. Late submissions will incur penalties unless prior approval for an extension has been obtained.