I replied personnally on this before, but I want to restate my views in
summary for the group. There should be no specific distance because
distance alone is not a sufficient criteria for safety. To locate the
primary and backup sites along the Mississippi River (for instance) would be
a mistake. The other issue envolves physical movement of either backup media
or personnel. One can not be sure that travel will be possible in a
disaster. So, backup tapes might not be deliverable and workers might not
be able to get to their work places. Just to counter the nuclear disaster
scenario, a huge snowstorm can have a widespread and damaging effect and is
more likely.
Steve Taylor, SAIC

-----Original Message-----
From: David Keith duBose [mailto:dkdubose@earthlink.net]
Sent: Saturday, January 19, 2002 1:11 AM
To: peter.kunz@eycom.ch
Cc: nslookup@hushmail.com; cisspstudy@securityfocus.com
Subject: Re: Regs. on DR

For Pete Sake,

Only 25 miles? More like a 100 miles, don't forget about EMP, she is a
bit..., better use optical media for backups.

for civil
Guidelines for ADP Contingency Planning
http://csrc.nist.gov/publications/fips/fips87/fips87.pdf

for DoD Directive
Continuity of Operations (COOP) Policy and Planning

http://www.dtic.mil/whs/directives/corres/html/302026.htm

for commercial
???

peter.kunz@eycom.ch wrote:

>
>
>I believe it's 25 miles, ensuring that the backup is outside the blast
>radiuas of a tactical nuclear explosion. Remember, many of the first CISSPs
>are/were military, and thus military guidelines had a major influence
>especially on phyiscal security.
>
>Anyone care to answer the question on what the quickest way of getting past
>a fence a) plain b) barbed wire c) electrical is? :-)
>
>cu
>-pete
>
>---------------------------------------------------------------------------
------------------------------
>
>Peter J. Kunz
>
>Ernst & Young
>eSecurity
>P.O. Box 5272
>8022 Zurich
>Switzerland
>
>Phone +41 1 286 4292
>Fax +41 1 286 4014
>
>
>-----BEGIN PGP SIGNED MESSAGE-----
>
>I'm studying for the CISSP, and am trying to get some details on Disaster
>Recovery regulations. Does anyone know what are the rules concerning the
>distance between a Disaster Recovery site and the physcial location of the
>business? I've heard 90 miles, but I couldn't find confirmation of that in
>the DOD Orange Book.
>
>Thanks,
>Carlos
>
>-----BEGIN PGP SIGNATURE-----
>Version: Hush 2.1
>Note: This signature can be verified at https://www.hushtools.com
>
>wl0EARECAB0FAjxDAj4WHG5zbG9va3VwQGh1c2htYWlsLmNvbQAKCRAU2f+WofxSbEqC
>AJ9BhXhm435W5BACDvqVxT4KYcvAcQCgoc4TJBmrmZfLDOLOjCCfhZXkslU=
>=aguu
>-----END PGP SIGNATURE-----
>
>
>
>
>

-- 
<cid:part1.04030003.02000405@netscape.com>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]