Rothstein Associates Inc.

CYBER TERRORISM:
A GUIDE FOR FACILITY MANAGERS
by Joseph F Gustin

- Addresses cyber terrorism and other forms of terrorist activity
- Reviews both physical and network facets of computer and data protection
- Discusses the creation of a business continuity plan, focusing on loss prevention
strategies
- Examines the importance of standby power systems
- Analyzes web site security as the cornerstone of successful and secure
e-commerce

Recent viruses that struck computers worldwide not only made global headlines, but also
cost
businesses and personal users billions of dollars and man hours to recover data and fix
networks. The
Business Week headline asks the key question: “Epidemic: Crippling computer viruses
threaten the info
economy...Can they be stopped?” A CNN report indicates that “63,000 viruses have rolled
through the
Internet, causing an estimated $65 billion in damage.” Furthermore, a recent survey by ICSA
Labs of
firms with more than 500 PCs found they took an average of 23 person days to recover (data /
functionality /loss of revenue due to denial of service) from each virus disaster.

In the current climate of terrorism, the facility manager is in a more critical position than ever
before.
Protecting the organization's infrastructure from cyber-based attacks that are designed to
disrupt and/or
destroy business operations is becoming increasingly important for facility managers.
Renowned author
and instructor, Joseph F. Gustin, in this new timely book, addresses cyber terrorism and
other forms of
terrorist activity, including mailroom security, bomb threats, and the constant attack from
viruses, hackers
and other invasive programs. Also covered in detail are the necessary steps for prevention,
how to
assess vulnerability, emergency preparedness, prevention strategies, and incident response
and
recovery.

- - - - - - - - -

CONTENTS

Technology & the Facility Manager
Computer & Data Protection: The Cyber Dimension
Computer & Data Protection: The Physical Dimension
Business Continuity: Loss Prevention Strategies
Personal User Issues
Standby Power Systems
Web Sites: The Cornerstone of E-Commerce
Communications & Training
Recovery Planning
Cyber Crime: Handling the Threat
Appendix 1 - Template for Security Plan
Appendix 2 - Glossary
Appendix 3 - System Questionnaire
Appendix 4 - Sample IT Contingency Plan Format
Appendix 5 - FBI Field Offices
Index

- - - - - - - - -

EXCERPT FROM THE PREFACE

“If facility management is the art of integrating people with their physical environment - and it
is - then the
science of facility management lies in executing its complexities and challenges. In its
traditional form,
facility management involves responsibility for the care and maintenance of a site's physical
property. In
its hybrid form, facility management assumes even more complex responsibilities. Included in
these
responsibilities is determining the processes and modes of operations that will be used to
ensure the
continuity of critical business operations.

“Among the most critical of any business operation is an organization's information systems.
The
challenge lies in the processing, storage, and transmission of a system's data and
information. With the
proliferation of electronically processed information, attention has invariably focused upon the
safe
maintenance and transmission of a company's information. The loss and/ or destruction of
valuable
business data is of paramount importance to all companies and organizations. And as such,
the need for
increased safeguards and vigilance to prevent information and data loss has heightened.

“Cyber Terrorism: A Guide for Facility Managers, addresses these issues. It provides a global
perspective on the issue of information technology and its vulnerabilities and sensitivities. It
de-fines the
various threats to a computer system and outlines strategies to protect a system's integrity.”

- - - - - - - - -
-

EXCERPT FROM THE INTRODUCTION

“Companies have always recognized the need for ensuring the integrity of their business
operation.
However, the proliferation of information systems and the technology that spawned it has
in-creased this
need. The various system configurations, as well as the policies and programs that drive a
company’s
operations, can and do determine a company's overall performance. As such, the awareness
of securing
vital business information and a company's critical assets has taken center stage.

“The key to understanding the complexities and the challenges of maintaining secure
information sites
lies in prevention. And Cyber Terrorism: A Guide for Facility Managers, focuses on developing
those
policies that make for effective business practices. The book stresses the importance of
incorporating a
cyber terrorism policy into a company's overall business continuity/disaster recovery plan.

“An introduction to IT security issues, each chapter discusses in “plain” language, an
essential element of
computer security. For example, Chapter 1 focuses on technology and the facility manager. It
discusses
servers, LANs, WANs, distributed and main-frame systems, desktop and portable
computers. It also
discusses the limitations and vulnerabilities of each. The chapter also out-lines specific
strategies for the
facility manager to employ in the maintenance and prevention of secure systems information.

“Chapter 2 identifies the various threats to a computer system, including unauthorized
access,
denial-of-service attacks, theft, financial fraud and sabotage. The chapter also includes
general
categories of computer attacks.

“Chapter 3 addresses business continuity and loss prevention strategies. Its focus is on
managing the
contingencies for data systems.

“Cyber Terrorism: A Guide for Facility Managers, focuses on developing an effective plan to
protect an
organization's resources and assets including a company's financial assets, reputation,
physical and
human resources. It emphasizes the degree of protection for the physical and cyber
dimensions of a
company's re-sources. It reinforces the idea that an effective means of countering physical
and cyber
threats lies in a business continuity/disaster recovery plan based on assessing risks,
identifying
vulnerabilities and increasing prevention techniques. In short, its basic premise states that
the level of
protection must be commensurate with the degree of threat.”

- - - - - - - - -

ABOUT THE AUTHOR

JOSEPH GUSTIN is a professional writer, consultant, and noted speaker and lecturer
specializing in
regulatory compliance. With more than 20 years of experience, he has held various personnel
and
human resources management positions in both the public and private sectors. Mr. Gustin
served as
Director of Training and Development for a major multi-unit healthcare system where he
designed and
developed all facets of personnel training for the organization’s 5,000 employees.

His experience as manager of training and development for a leading financial institution
included
designing management development and supervisory training programs, as well as employee
training
programs.

As a consultant, Mr. Gustin provides human resources and regulatory compliance consulting
services to
corporate and institutional clients, focusing on compliance and human resources program
planning.

As a writer, Mr. Gustin has co-authored various training and resource guides for professional,
administrative and medical personnel. He is the author if Safety Management: A Guide for
Facility
Managers...”

- - - - - - - -
2004, 259 pages. Order #DR766
- - - - - - - -

4 Arapaho Rd.

Brookfield, CT 06804-3104

1-888-ROTHSTEin

Telephone: 203.740.7444; 888.768.4783

Fax: 203.740.7401

All bookstore enquiries should be sent to Rothstein Associates at the above address.

Looking for Practical Knowledge?