MonsterMed Inc. (MMI) is an online pharmaceutical firm. MMI has a small systems staff that designs and writes MMI's customized software. The data center is installed in the basement of its two-story headquarters building. The data center is equipped with halon-gas fire suppression equipment and an uninterruptible power supply system.
The computer operations staff works a two-shift schedule, five days per week. MMI's programming staff, located in the same building, has access to the data center and can test new programs and program changes when the operations staff is not available. Programmers make changes in response to oral requests by employees using the system. Since the programming staff is small and the work demands have increased, systems and programming documentation is developed only when time is available. Backups are made whenever time permits. The backup files are stored in a locked cabinet in the data center. Unfortunately, due to several days of heavy rains, MMI's building recently experienced serious flooding that destroyed not only the computer hardware but also all the data and program files that were on-site.
a. Identify at least five weaknesses in MonsterMed Inc.'s backup and DRP procedures.
b. Evaluate change controls at MonsterMed Inc.