FreeMSU sells MSU souvenirs through direct mail. The company has a small systems staff that designs and writes customized software.

FreeMSU has experienced significant sales growth as the company became known by MSU alumni. As a result of these increased sales, the company has purchased its own computer hardware. The computer center is installed on the ground floor of its two story headquarters building located in Montclair, NJ. It is behind large plate glass windows so that the state of the art computer center can be displayed as a measure of the companys success and attract customer attention. The computer area is equipped with halon gas fire suppression equipment and an uninterruptible power supply system.

FreeMSU has hired a small computer operations staff to operate this computer center. To handle the current level of business, the operations staff is on a two shift schedule, five days per week. The systems and programming staff, now located in the same building, has access to the computer center and can test new programs and program changes when the operations staff is not available. As the systems and programming staff is small and the work demands have increased, systems and programming documentation is developed only when time is available.

Periodically, but not on a scheduled basis, the company backs up its programs and data files, storing them at an off site location.

Unfortunately, due to several days of heavy rains, the building recently experienced serious flooding which reached several feet into the first floor and affected not only the computer hardware but also the data and program files that were on site.

REQUIRED:

Describe at least four computer security weaknesses that existed at FreeMSU prior to the flood.

Describe at least five components that should be incorporated in a formal disaster recovery plan in order that FreeMSU can become operational within 72 hours after a disaster affects its computer operations capability.

Identify at least three factors other than the plan itself, that the company should consider in formulating a formal disaster recovery plan.