Information Security Fundamentals, 2nd Edition

Continuity of Operations Planning  ◾  193

in response to increased personnel safety associated with natural disasters or acts

of violence.

ere are some additional challenges that have emerged as a result of all these

new capabilities that should be addressed by every organization as part of their

CoOP process. As critical data or services are moved out of corporate-owned facili-

ties or are being performed by business partners instead of employees, compensating

controls need to be established to maintain the organization’s security posture and

demonstration of regulatory compliance. Carefully worded terms and conditions in

vendor contracts and service agreements should explicitly establish ownership, cus-

todianship, and accountability for critic ...