Business Continuity Plan for FedEx Office Print & Ship Center in Idaho

This report presents a business continuity plan tailored for a FedEx Office Print & Ship Center in Idaho. It begins with an introduction to business continuity planning and its importance, followed by an analysis of the organization's exposure to internal and external threats, such as employee negligence, hacking, and power outages. The report identifies organizational strategies to mitigate these risks, including auditing, regular system testing, and the implementation of clear policies. It also foresees potential security risks like social engineering and phishing, emphasizing the importance of employee training to address vulnerabilities. The report suggests strategies for plan development, regular evaluation, and testing. Furthermore, it includes an organizational risk analysis, highlighting the need for a clear understanding of requirements and the alignment of the business continuity plan with organizational culture. The conclusion reinforces the significance of a well-maintained business continuity program, integrating various strategies for optimal effectiveness. The report concludes with a comprehensive bibliography.

Running Head: BUSINESS PLAN
0
BUSINESS PLAN

BUSINESS PLAN
1
Table of Contents
Introduction.................................................................................................................................................2
Organization’s exposure..............................................................................................................................2
Organizational ways....................................................................................................................................2
Foreseen security risks................................................................................................................................3
Training importance....................................................................................................................................4
Suggested strategies....................................................................................................................................4
Organizational risk analysis.........................................................................................................................5
Conclusion...................................................................................................................................................5
Bibliography................................................................................................................................................6

BUSINESS PLAN
2
Introduction
Business continuity plan is effective to address the failures of the information system
(Spacey, 2015). The following discussion will cover that how small organization FedEx office
prints & ship center in Idaho should address and maintain the continuity within the information
system. As the IT manager in FedEx office prints & ship center will address the organization
exposure to the internal and external threats, identify the ways to maintain the risk, foreseen the
security risk, assess the importance of training on security risk, recommend the strategies, and
analyze the organizational risks.
Organization’s exposure
Threat is the activity that presents the possible danger. This is very important to have the
accurate portrait regarding the possible risks to FedEx office prints & ship center. Exposure of
the organization can be divided within the external and internal threats.
 Internal
This has been identified that more than 40 percent of the employees use the similar credentials of
login for both social media and corporate accounts. Unintentional threats come from the data
alteration/deletion. Employees within the organization can copy the information to solve the
business issues and further accidentally add the external email addresses to list of the receivers.
Display of the employee’s access can cause the organization. Transfer of the files through the
mobile phones and portable storage devices lead to the high internal threats.
 External
External hackers can be the biggest external threat for the FedEx office prints & ship center. Any
unauthorized internet operator can do the fake call to the FedEx office prints & ship center and
ask the confidential information which is the external threat for the business. The cut of power
can lead because of the storm can damage the activities of the FedEx office prints & ship center.

BUSINESS PLAN
3
Organizational ways
 FedEx office prints & ship center desires to maintain the present level of risk. Mitigation
of the risk is dictated through the risk assessment outcome. Management of the
organization has developed the clear policies and procedures for the use, access,
management, and information distribution which is stored on the system (Ercken, 2020).
Organization department of IT applied the following services.
 Auditing at external level is effective to identify the threats within the business.
 FedEx office prints & ship center should regularly review and tests the controls system
by categorizing the information.
 Organization should applied and implement the basic kind of principles that help to
become enough capable to maintain the chosen risk level by prioritize and identify the
confidential information.
 Assessment of the risk should be done to understand the flow of work and carried within
the business through the confidential information.
 FedEx office prints & ship center identifies the vulnerability and procedures to identify
and handle the sensitive information.
 The assessment of the risk is very effective to craft the rules of distribution regarding
confidential information.
 FedEx office prints & ship center through the regular monitoring become more capable to
identify the traffic on internet. Use of the appropriate software helps the business to
monitor electronic communication channels regarding the sensitive information. This is
supportive for the business to minimize the unauthorized traffic.
Foreseen security risks
The foreseen of risk for the FedEx office prints & ship center is prioritized by the
likelihood which are as follows.
 The social engineering activities are used by the hackers. This helps hackers to get the
confidential info. Hackers can portray as the legal personnel to the FedEx office prints &
ship center. It will be the biggest threat for the FedEx office prints & ship center.

BUSINESS PLAN
4
 Phishing is also used by the hacker at very high level in today’s time. These send the
forged email. This forces the employees to think that it is through the genuine website.
 Power outages because of the lastly occurred weather and disaster level events.
Training importance
To precise the significance of the employees training for the information systems security
it has been find that 40 percent of the employees use similar credential of the login for the use of
the social media and corporate accounts. This presents the poor understanding of the employees
regarding the security risk and also presents the poor employees training regarding the security
risk (Clarke, 2018). Training should be an ongoing effort while system changes and dictate.
Suggested strategies
Development of the business continuity plan not stops only making of the strategies
(Smith, 2016). It helps the businesses to address the organization events which disrupt at the time
of completion due to change within the people, sources, threats, and technology. The success of
the business continuity plan will remain effective due to the dynamic plan and static plan of
action. Organization should use the ongoing strategies to improve the business continuity plan as
required.
 Regular evaluation of the business impact analysis
Business impact analysis is effective. This helps the business to analyze the criticality of the
system. It will prioritize the system to identify the requirements which are necessary to be
recovered according to the disaster. FedEx office prints & ship center should regularly evaluate
the new assets. It will help the business to identify the changes within the environment that
differs from the business impact analysis and aligned within the process of business continuity
plan.
 Regular testing
Business continuity plan should be tested at the every phase to ensure that procedures are
executed more effectively. Business continuity plan through the regular testing will help the
business to become more appropriate at the time of disruption.

BUSINESS PLAN
5
Organizational risk analysis
Scope and understanding appear to the core problems in which organizational executives
have the unrealistic perspective regarding the business continuity planning which focused to
develop the organization culture. Those involved within the development of the business
continuity plan should have the clear understanding about the organizational requirements and
create the foundation which aligns with it (Rouse, 2020). For long period, preparation of the
business continuity plan is very important. Preparation, implementation, and maintenance of
business continuity plan are complicated responsibility. It helps the businesses to analyze the
particular steps and require the appropriate techniques. Analysis of the organizational risk within
the execution of business continuity plan helps the management to improve program by layering
within the software applications. Organization should focus on the culture to tackle the business
continuity consequences which help the business to experience the substantial change, regular
requirements and plan to remain the competitive.
Conclusion
Business continuity plan is known as the straight concept. The efforts of the risk
management are very typical due to the different approaches applied by the organization
management. Making and maintaining the business continuity program is effective to follow the
best practices. Combining the strategy enable the business to become more effective.

BUSINESS PLAN
6
Bibliography
Clarke, L., 2018. Security Awareness. [Online]
Available at: https://www.cio.com/article/3522897/why-is-security-awareness-training-
important.html
[Accessed 03 03 2020].
Ercken, D., 2020. Risk Management. [Online]
Available at: https://www.referenceforbusiness.com/management/Pr-Sa/Risk-
Management.html
[Accessed 03 03 2020].
Rouse, M., 2020. Analysis of the Risk. [Online]
Available at: https://searchsecurity.techtarget.com/definition/risk-analysis
[Accessed 03 03 2020].
Smith, P., 2016. The Importance of Training. [Online]
Available at: https://www.smarttech247.com/news/importance-security-awareness-
training/
[Accessed 03 03 2020].
Spacey, J., 2015. Organizaional exposure. [Online]
Available at: https://simplicable.com/new/organizational-risk
[Accessed 03 03 2020].

BUSINESS PLAN
7