Regional Gardens Case Study PDF

RISK MANAGEMENT 0
Regional Gardens Case
Study

RISK MANAGEMENT 1
Table of Contents
Introduction................................................................................................................ 2
Objectives............................................................................................................... 2
Executive overview.................................................................................................... 2
Business impact analysis............................................................................................ 3
Incident response plan............................................................................................... 5
Backup plans.............................................................................................................. 6
Disaster recovery plan................................................................................................ 7
Steps and techniques for mitigating security risks..................................................7
Conclusion.................................................................................................................. 8
References................................................................................................................. 9

RISK MANAGEMENT 2
Introduction
A regional garden LTD is a kind of organization that runs various
kinds of enterprises. The organization also owns the regional gardens
nursery that sells garden supplies and plants to the consumers and provides
garden design and consultancy related services. In terms of infrastructure,
the regional garden does not use effective security tools and techniques and
does not have any disaster recovery system due to which hackers can easily
access the databases and perform hacking activities (Arenas, Massonet,
Ponsard, & Aziz, 2015).
Most of the employees in the organization know the administration
password which is a serious issue by which employees can access stored
data easily that may produce data breach issues. The purpose of the
research is to develop security and privacy-related policies for the
organization to protect resources and sensitive information. In which the
management needs to propose a business continuity plan that will help to
manage the security problems of the organization and implement the
effective disaster recovery systems by which management can handle cyber-
crimes in the future. This report will cover various parts including an
executive overview, business impact, incident response, disaster recovery,
and backup.
Objectives
There are various objectives of the research which are highlighted
below:
 To develop a proposal for the regional garden
 To evaluate the issues faced by the regional garden
 To implement a backup plan for securing private data
 To develop a disaster recovery plan for addressing security attacks

RISK MANAGEMENT 3
Executive overview
BCP is defined as a business continuity plan which is mainly used in
the companies for developing and implementing effective policies in order
to solve the risks and security issues. The significance of implementing a
business continuity plan is to ensure the continuation of business while
managing critical incident that helps to enhance the capability of the
developed systems. Blos, Hoeflich, & Miyagi, (2015) examined that a
business continuity plan is an effective approach that is utilized for ensuring
that business procedures may continue at the time of any security attack or
disaster. After reviewing the provided case study, it is found that the
regional garden does not have an effective disaster recovery plan due to
which the management is not able to address security-related problems
(Greitzer, et al., 2014).
This BCP plan will help the company to manage the disasters and
risks that occurred in the workplace and helps to enhance the privacy of
data effectively. In the proposed business continuity plan, four elements will
be covered including recovery, prevention, preparedness, and response. The
prevention element will help to identify and manage risk factors occur in
the developed systems. Preparedness elements will help to determine the
key activities of the organization towards disaster recovery. It is argued that
a regional garden requires to develop an effective business continuity plan
that may include business impact analysis and disaster recovery process.
With the help of these approaches, the organization can protect sensitive
information and manage disasters effectively.
Business impact analysis
It is an essential section of a business continuity plan that helps to
evaluate the business operations and activities of the companies. In the case
of the regional garden, business impact analysis can be applied where the
operational performance of the business can be evaluated related to