Page339

Telecommunication Management

Telecommunication management ensures the availability of electronic communications during a disaster. Communications is often one of the first processes to fail during a disaster. In the event of a widespread disaster, electricity, landlines, and cell phone towers may be inoperable, as they were in Louisiana in the aftermath of Hurricane Katrina. In that case, satellite phones were the only means of electronic communication immediately after the hurricane.

Also, most communications systems are designed on the assumption that only a small percentage of users will access them simultaneously. Most landlines and cell phones became unusable in New York City in the aftermath of the terrorist attacks of 9/11/2001, mostly due to congestion: too many people attempted to simultaneously use their phones.

Wired circuits such as T1s, T3s, and frame relay need to be specifically addressed. A normal installation lead-time for a new T1 circuit may be 30–45 days during normal business operations. That alone is longer than most organizations' Maximum Tolerable Downtime. Also, lead-times tend to lengthen during disasters, as telecommunications providers may need to repair their own systems while managing increased orders from other organizations affected by a widespread disaster.

Wireless network equipment can play a crucial role in a successful telecommunication management plan. Point-to-point wireless links can be quickly established by a single organization, and some point-to-point long haul wireless equipment can operate at distances of 50 miles or more. A generator can provide power if necessary.

Utility Management

Utility management addresses the availability of utilities such as power, water, gas, etc., during a disaster. Specific utility mitigating controls such as power availability, generators, and uninterruptible power supplies are discussed in Chapter 4, Domain 3: Security Architecture and Engineering.

The utility management plan should address all utilities required by business operations, including power, heating, cooling, and water. Specific sections should address the unavailability of any required utility.

Recovery Options

Once an organization has determined its maximum tolerable downtime, the choice of recovery options can be determined. For example, a 10-day MTD indicates that a cold site may be a reasonable option. An MTD of a few hours indicates that a redundant site or hot site is a potential option.