3. Business Continuity and Disaster Recovery Plans
Compass IT Compliance will review your current business continuity and disaster recovery plans for completeness and provide any recommendations to assist in making the business continuity and disaster recovery plans complete.
4. Business Resilience Tabletop Exercises
Compass IT Compliance will assist you in understanding and identifying gaps in response plans through the use of tabletop exercises and documentation that will simulate the threat of security and disaster events without having to experience it for real. Depending on the needs of the organization, this can be a security event such as a ransomware attack, a business continuity event such as a fire or flood, or a combination exercise that allows the organization to utilize both incident response and business continuity during a single test. Both types of tests deal with the identification, assessment, response containment, and recovery of events. These exercises will assist in creating muscle memory for event response and recovery, and gaps identified can be used to improve the plans.
5. Backup and Recovery Procedures
To be able to recover from a security or continuity event, you must have the correct backup and recovery procedures for data. Compass IT Compliance can review your current backup and restore procedures and ensure that timely backups are being taken and proper recovery procedures are followed. We will compare your ability to recover to the RPOs and RTOs in your business continuity plans, and review that critical data, as defined by you, is being backed up.
Let Compass IT Compliance assist your organization in assessing any risks present through our Business Resilience Review so you can mitigate not only your risk of falling victim to a ransomware attack, but also minimize the damage that a successful attack could inflict. Contact us today to discuss your unique situation!