On Fri, 21 Feb 2003 14:41:05 EST, Martin Hannigan said:
Example: DHS sets RED level. Reaction: Move some third level engineers into the SOC. Audit the DR plan if it's not on schedule to be audited. Audit the backup plans if not on schedule to be audited. Light the medium warm NOC to HOT NOC level.
Do you buy fire extinguishers when there's no fire, or do you do it when the smoke alarm is already going off? Or is this the converse, where a leaky roof doesn't get fixed because you can't work on it on rainy days, and on sunny days it doesn't leak? If your DR/backup plan isn't already squared away, RED is a *very* bad time to be screwing with it. Anybody who's read this list for a while has seen enough examples of "attempt to fix broken network only makes it worse". If you audit your backup plan, and discover you're low on tapes to send off-site, what are the chances that we'll still be at RED when the tapes actually arrive from the vendor? -- Valdis Kletnieks Computer Systems Senior Engineer Virginia Tech