Tag Info

New answers tagged

2

This question verges upon opinion-based, but I'll try and provide some suggestions based on my experience (which is biased towards PCI but touches on others). It isn't specific to the cloud but I believe there's an equivalence. Some rules of thumb: Attestations / summaries are distributed, reports are generally not Policies are more likely shared than ...


0

I would suggest having a living document - probably a wiki, a page, etc. If you have the people, a separate hardcopy edition that includes all disaster scenarios described and mitigation techniques. Another monkey wrench would be the implausible scenario that the living document gets overwritten just before an incident. You could plan for everything but ...


2

Any documentation software will work just fine, even a bare web page can do what you hope a wiki could. But, there is one aspect that you need to keep in mind: an authoritative version. Having a wiki means interative versioning, but that's also its weakness. How can the organization have faith that in the middle of a disaster that they are using the tested, ...



Top 50 recent answers are included