Information Security Fundamentals, 2nd Edition

Continuity of Operations Planning  ◾  173

Event Detection and Documentation

Many organizations, even large, well-funded companies, may not have an effec-

tive method for capturing and cataloging disruptive events. e CoOP activity

process probably isn’t grounds enough to build a robust system from scratch;

therefore, first attempt to adapt any existing help desk or event management

workflows to support your program. In many cases, a less formal process for log-

ging events as they are identified and tracked typically is handled by a traditional

IT help desk. Identify and document how event logging and tracking is cur-

rently handled to see whether it is sufficient for your plan or if it can be adapted

to ensure that potentially disruptive events are ...