Business as usual?

The only security topics on most IT workers' minds is Job Security.  The usual preoccupation with new security plagues, like worms, assumes second priority as so many discuss layoffs -- potential and actual.

As the global economy slows, how well prepared are you and your organization?  Normally, Business Resumption Planning (BRP) is a topic reserved for 'one of these days'.  That day is now.

Consider your organization's own preparations:

• Process documentation up-to-date?
• Cross-training plans accomplished?
• Humane and secure termination plans and processes ready?

It's sad.  Many of us Information Security pro's have talked up being ready for avian flu.  Instead, we now confront the transitions caused by dozens (or thousands) of workers leaving the facility, leaving the country in some cases, some of whom may act on their bitter feelings.  Data access control plans in place?  Is all hardware checked as returned, with disk drives noted as being in place?

These topics are tough, very difficult for anyone to discuss.  In comparison, they make horror stories about Conficker's next steps an entertaining distraction.  But there's a final loss that's really challenging to us all.

Even if your best laid plans are made and won't go awry, the Brain Drain your organization faces will be difficult.  Many professionals close to retirement seem to be choosing that option countrywide.  Among those retirees are fellow professionals whose judgment is valued by many, especially me.  The business acumen and professional credentials aren't replaced easily, never will be; but soon, we who remain need to step up and step in and hope we can do half as well. 

And how do you prepare for that kind of challenge?

jt