2023 IT Examiner School

Internal Use Only

CIA Control Table - Availability Corrective Detective Preventative • DR Procedures • Emergency Procedures • BC/DR Planning Tests • Continual Monitoring Enabled

• Strategic Planning • Business Continuity (BC)/ Disaster Recovery (DR) Planning • Business Resiliency Planning

• Logging Configuration • Regular Log Reviews

Administrative

• Fire Suppression • Back-Up Media • Uninterruptible Power Supply (UPS) • Generator • Data Vaulting • Failover Configurations • Redundancy Arrays (RAID, Mirroring, Virtual Snapshots, etc.)

• Smoke Detectors • Water Detectors • Video Surveillance • Motion Detectors

• BC Planning Recovery Team • IRP Team • Off-Site Storage/Backups

Physical

• Anti-Malware Software • System Performance Monitoring

• Failover Systems • Load Balancing

Technical

Internal Use Only

Use of Controls to Mitigate Risk