ABR Gaming is a small gaming software distribution company based in Melbourne that employs 12 members of staff who work from home. Its joint owners Leila and Max, have just experienced a malware attack on their computer systems due to a member of staff downloading information from a malicious website, causing a virus on all of the company machines. They believe the attack has compromised sensitive customer data.

They assumed that they had protection in place using free anti-virus software that they received when purchasing laptops for the company.

Now, Leila and Max want to create a disaster plan to prevent the same or worse from occurring again and protect their company's sensitive information.

They have decided they should:

• Purchase anti-malware protection
• Keep their software updated and password protected
• Back up their files regularly
• Train staff to be aware of the dangers of cyber-attacks.

1. Determine if a disaster plan exists.

2. Identify two key features that should be included in the disaster plan to ensure the problem doesn't happen again.

Scenario

As part of their business continuity plan to keep the company safe from cyber-attacks, Leila and Max have decided that they will purchase employee monitoring software that will be installed on company laptops. This will give them visibility on the day-to-day activity of their employees and give them peace of mind when downloading information from the internet.

Using your research skills, find one piece of relevant information for each of the following points in relation to the actions that Leila and Max want to take:

• Regulations of employee monitoring software
• The standards that would need to be considered
• Relevant industry practices
• Geographical dispersion of all the laptops.
• Lead a meeting with the stakeholders to seek feedback on the decision to purchase and install employee monitoring software to protect the company from further malware attacks.

Define a final continuity plan that outlines the actions that Leila and Max need to take to protect their company. Define an email template that you could send to relevant staff to outline the important information in the business continuity plan.

Summaries the details in the business continuity plan created and make suggestions for assigning relevant staff actions.

Outline a plan of action to establish a communication plan that will allow the employees of the company to report issues or use escalating processes.

Scenario

As part of the business continuity plan, Leila and Max have decided to purchase an online training package for security awareness for all of their employees.

The training package will cost Leila and Max $4000. However, the benefits are:

• 20 hours of learning for up to 30 employees
• It can be accessed at any time
• Employees can complete the training at their own pace, but it has to be completed within a three month period from the day of purchase
• Will cover all related aspects of online protection solution
• Employers can get full results and feedback from employees' performance.

Refer to the scenario and list two ways in which staff learning and development can be managed and recorded when implementing a knowledge management system.