Case Study - Grow Management Consultants Grow Management Consultants is a management consultancy company specialising in providing services to companies to assist them to improve the leadership performance of their staff. The company also offers a range of other services including professional development workshops, as well as an extensive library of e-books which are sold through an online shop. The e-books are very popular and focus on a wide range of leadership themes. Grow Management Consultants staff all work remotely in their own homes (all located within 10 km of each other). Staff include the CEO, Patricia Burns supported by three Principal Consultants who provide consulting services and write the e-books. A Customer Service Officer answers all customer enquiries and processes orders for consulting services and workshops. eBooks are stored on the company's internal system, OneDrive and link directly to the online shop so that if changes are made, this automatically updates on the shop. The e-books are the company's main source of income so any disruption to the online shop would have an immediate impact on the company's functions. Further any disruption to the existing software, Microsoft Office for Business hosted through OneDrive will have a significant impact as consultants will not be able to carry on with their critical consulting work which drives clients to the online shop. For the purposes of this assessment, you are to assume you are an ICT professional contracted to prepare a disaster recovery plan. It is noted that the business does not have any specific statutory or commercial requirements to abide by other than the usual legislative requirements for businesses. It is also notes that the business uses Xero for its accounting system and stores staff and customer information as Microsoft Word documents. These systems are all critical. The company is in a strong financial position and is prepared to put forward at least $20,000 per year to assist in prevention measures to assist with mitigating disaster. Staff knowledge of cyber security threats is limited. There is no specific policy on anti-virus software or firewalls