QUESTION 1

The major decision hierarchy for disclosing security problems is if the problem is with a product owned by the business or if it is used by the business. Although the paths are related, they have some major differences that management needs to be aware of before making any decisions. If the security problem is within the company or one of its own products. What are the issues that management needs to think about?

QUESTION 2

There are a variety of ways to test a BCP plan. These tests do not have to be costly or interrupt the daily operation of the business. The result of the test should also be looked at not as one of pass/fail but more in terms of the evolution of the plan. Finding out about weakness in a plan as the result of testing is certainly better than as a result of a real disaster. We also know that there are testing alternatives, what should they include?