You are an information technology (IT) intern working for the Defense Logistics Information Service (DLIS) in Battle Creek, Michigan. DLIS is an organization within the Defense Logistics Agency (DLA), which is the largest logistics combat support agency for the Department of Defense. DLIS creates, manages, and disseminates logistics information to military and government customers using the latest technology.

Senior management at DLIS decided that the existing risk management plan for the organization is out of date, and that a new risk management plan must be developed. Because of the importance of risk management to the organization, senior management is committed to and supportive of the project to develop a new plan. You have been assigned to develop this new plan.

1. After having reviewed and being impressed by your Project 1, Part 1 on Risk Management, the senior management at DLIS decided that your team must also develop a BCP as your team is doing so well. Management has also allocated all funds for a BCP and your team has their full support, as well as free reign to call on any of them for participation or inclusion in your BCP plan. You have been assigned to develop this new plan after taking into consideration the following additional information on DLIS IT infrastructure.
2. DLIS has a global reach and at least 50 file servers and various databases (12) running everything from an enterprise resource planning (ERP) system to the organization payroll system that has an electronic funds transfer (EFT) capability. Other things worth noting are a warm site within 50 miles of the headquarters data center. No plans exist for it. You will want to use it in your BCP planning. Currently back-ups are done with an outside vendor. However, your team will want to recommend a new process (vendor) and develop a new back-up plan for approximately five terabyte (TB) of critical classified data. Do not forget to develop a testing plan for your teams BCP.

1. Task 3: Disaster Recovery Plan
   1. Your project on risk management up to this point has been liked and appreciated by the senior management at DLIS. They now want you to develop a DRP in order to overcome any mishaps that might occur in the future. Use your research on NIST templates to develop a DRP plan for DLIS.
2. Task 4: Computer Incident Response Team Plan
   1. By now you should have developed a RA, BIA, BCP, DRP, and a risk mitigation plan.
   2. In this assignment, you will create a CIRT plan for DLIS after having learned the concepts of CIRT. Remember that the DLIS headquarters (HQ) handles all incidents, so the plan will have its roots at HQ. After creating the CIRT plan, you will have to compile the completed set of your risk management plan together for final submission of the project. Make sure to incorporate your instructors feedback in your final set of risk management plans.