Figure 4-4.—An example of countermeasures against fire loss.
Figure 4-5.—Threats, vulnerabilities, and countermeasures.
Not all attacks and events can be avoided. If we
cannot reasonably prevent something, we want to detect
the problem as early as possible, minimize the damage
and destruction, and recover as quickly and efficiently
as possible. To help us minimize and recover, we
develop contingency plans.
Contingency plans (backup plans) provide for the
continuation of an activity’s mission during abnormal
operating conditions. These are plans for emergency
response, backup operations, and post-disaster
recovery. They include a preparation phase that
includes the steps to be taken in anticipation of a loss to
Figure 4-6.—Types of AIS security countermeasures.
4-5
