You have been hired as a consultant to design BCP for SanGrafix, a video and PC game design company. SanGrafix’s newest game has become a hot seller, and the company anticipates rapid growth. It’s moving into a new facility and will be installing a new network. Because competition is fierce in the game industry, SanGrafix wants to be fully secured, documented, and maintained while providing high availability, scalability, and performance. Based on your current technology and information security knowledge, for this project you will design a BCP based off of the company profile below: A. Primary location in San Francisco, CA B. Secondary location/hot site in Sunnyvale, CA C. Capable of supporting 220 users in these departments: Accounting and Payroll, 16; Research and Development, 48; Sales and Marketing, 40; Order Processing, Shipping, and Receiving, 36; secretarial and office management staff, 20; upper management (including the president, vice president, and general manager), 10; Customer Relations and Support, 30; Technology Support, 20. D. Full OC3 Internet connection First step is to issue a clear policy statement on the Business Continuity Plan. At a minimum, this statement should contain the following instructions: 2. Agencies are required to conduct risk assessments to identify, estimate, and prioritize risks to organizational operations and conduct business impact analyses to identify all critical functions of the agency, entity or business unit and their supporting information systems. ITD’s Compliance Assurance Office is available to assist and/or conduct such assessments.3. Agencies are required to articulate specific information, including the de
tails necessary to effectively respond, manage, and recover from either an incident or a catastrophic event. Further, protecting data and confidential information should be integrated into the above referenced details.4. Agencies are required to ensure that all BCPs and supporting DRPs and COOPs are in alignment with and in support of any and all legal and regulatory requirements that the agency ITR’s are subject to.5. Agencies are required, at a minimum, to include the following documentation and procedures in their BCP and its supporting components: 6. Agencies are required to verify that critical third party vendors meet agency business continuity requirements during the contract negotiating process and prior to contract agreement and signature. Alternate third party vendors are required to be identified where appropriate. 7. Agencies are required to securely store copies of plans and supporting materials in a remote location; at a sufficient distance to escape any damage from a disaster at the agency’s main information processing facilities and be available (via remote connection, external e-mail location, etc.).8. Agencies are required to document, implement and annually test plans including the testing of all appropriate security provisions to minimize impact to systems or processes from the effects of major failures of IT Resources or disasters.9. Agencies are required to identify appropriate mechanisms to ensure that plans remain current and updated between annual tests and reviews accounting for: 1. Agencies are required to publish plans and sufficiently train any and all individuals that are required or responsible for supporting the BCP NO PLAGIARISM