KALASALINGAM UNIVERSITY

ANAND NAGAR, KRISHNANKOIL 626 190.

DEPARTMENT OF COMPUTER SCIENCE AND ENGINEERING

COURSE PLAN
Name of the Staff
: K.Pradeepa
Subject with Code : Risk Assessment and Disaster Recovery/ CSE5135
Course
: M.Tech
Sem/Branch/Sec
: II/IAS
PREREQUISITES:
Required: basic concepts of Risk assessments within Safety engineering and Reliability engineering when
it concerns threats to life, environment or machine functioning. A good knowledge of disaster recovery
plan risk management.
COURSE OUTLILNE:
Risk assessment is the determination of quantitative or qualitative value of risk related to
a concrete situation and a recognized. A disaster recovery plan (DRP) is a documented process or set of
procedures to recover and protect a business IT infrastructure in the event of a disaster. The objective of a
disaster recovery plan is to minimize downtime and data loss. The primary objective is to protect the
organization in the event that all or part of its operations and/or computer services is rendered unusable.
The plan minimizes the disruption of operations and ensures that some level of organizational stability and
an orderly recovery after a disaster.
COURSE OBJECTIVES:
CO1: To study the disaster recovery and strategies for system recovery.

CO2: To study the improvement for recovery management, planning, controlling and testing.
CO3: To study the Risk analysis concept with qualitative and value analysis.
CO4: To enable the students to develop QRA, FRAP and BIA forms with questionnaires.
CO5: To have knowledge about new threats in risk assessment and integrated risk management.

PROGRAM EDUCATIONAL OBJECTIVES(PEOs)

1. Graduates will have sufficient expertise on Computer Engineering to understand, and analyze real life
problems and provide solutions.
Our mission is To Produce Technically Competent, Socially Committed, and Readily
Employable Computer Engineers by Offering Quality Education and through valueadded courses and Soft skill training.

2. Graduates will have the expertise in adapting contemporary technologies followed in the industry.
3. Graduates will possess team work, leadership and innovation skills to succeed in the industry
environment.
4. Graduates will have good communication skills in both oral and written form to articulate technical
knowledge, ideas and proposals.
5. Graduates will possess the required knowledge and motivation to pursue higher studies leading to
research.

PROGRAMME OUTCOMES
Ability to apply knowledge of mathematics and Computer engineering to formulate, and solve
Computational problems in engineering.
Ability to use the techniques, skills, and modern engineering tools necessary for practice in
Computer engineering.
Sound Knowledge in Programming languages and Software engineering with an ability to develop,

test and debug the software.

Knowledge in advanced topics in Computing.
Ability to work on multi-disciplinary areas.
Understanding the professional and ethical responsibility.
Ability to understand the impact of engineering solutions in a global, economic, environmental,

and societal context.

Ability to communicate effectively with the superiors and fellow colleagues.
Ability to engage in life-long learning.
Ability to involve in Innovation and Research

MAPPING OF COs WITH POs AND PEOs:

A B C D E F G H I

PEO1

PEO2

PEO3

CO 1
CO 2
CO 3
CO 4
CO 5
CO
1
2
3
4
5

PEO
a,b
A,b,c
A,b,c
A,d,e
A,b,d,e

PO
a,b,c,h
b,d,h,e,f
b,d,h,e,f
c,f,g,i,j
c,d,f,g,i,j

Our mission is To Produce Technically Competent, Socially Committed, and Readily

Employable Computer Engineers by Offering Quality Education and through valueadded courses and Soft skill training.

PEO4

LEARNING OUTCOMES ANDASSESSMENT:

COURSE OUTCOMES
CO1: Understand the concepts of

ASSESSMENT TOOL
SE I Exam short answer question, model

disaster recovery and strategies for

exam(or) End semester short answer questions

system recovery

SE I Exam Long answer question, model

MARKS
2x2
1x16

exam(or) End semester short answer questions

CO2: Learn the improvement for
recovery management, planning,
controlling and testing

CO3: Know the concepts risk analysis

with qualitative and value analysis

CO4: Be able to analyze QRA, FRAP

and BIA forms with questionnaires

CO5: Prepared to use the presented

ideas of new threats in risk assessment

SE I Exam short answer question

SE I Exam long answer question

3x2
1x16

model exam(or) End semester short answer

1x8
2x2

questions
model exam(or) End semester Long answer

1x16

questions
Assignment
SE II Exam short answer question
SE II Exam long answer question

10
3x2
1x16

model exam(or) End semester short answer

1x8
2x2

questions
model exam(or) End semester Long answer

1x8

questions
SE II Exam short answer question, model

2x2

exam(or) End semester short answer questions

SE II Exam Long answer question, model

1x16

exam(or) End semester short answer questions

Assignment

10

Exam short answer question

2x2

Exam Long answer question

1x16

assignment

10

and integrated risk management

Understand the concepts of disaster recovery and strategies for system recovery.

Learn the improvement for recovery management, planning, controlling and testing.

Know the concepts risk analysis with qualitative and value analysis.

Be able to analyze QRA, FRAP and BIA forms with questionnaires.

Our mission is To Produce Technically Competent, Socially Committed, and Readily

Employable Computer Engineers by Offering Quality Education and through valueadded courses and Soft skill training.

Prepared to use the presented ideas of new threats in risk assessment and integrated risk

Reference Books:

Sno

management.

Name of the Book

Author / Publisher(s) / Year

Companion Websites

Information Security Risk

Analysis

Thomas
Peltier
R,
http://www.itswtech.org/lec/dr.shaym
AUERBACH, 1st edition, 2001
aa/information_security/binder1.pdf
---

Disaster Recovery Planning:

Strategies for Protecting
Critical Information Assets

Jon
William
Toigo,
Margaret Romao Toigo,
http://www.bokus.com/bok/9780130
Jon Toigo, Prentice Hall PTR,
845061/disaster-recovery-planning/
3rd edition, 2002
--

Develop an Effective Disaster

Recovery Plan

http://book.itep.ru/depository/recover
y/EqualLogic_TRResourceGuide_D
PR_01.pdf
--

TecRepublic

E-Books
Name of the Book
Information
Security Risk
Analysis
Disaster
Recovery Planning:
Strategies for
Protecting Critical
Information Assets
Develop an
Effective Disaster
Recovery Plan
Disaster
Recovery Planning:
preparing for the
unthinkable.

Web Link
http://www.itswtech.org/lec/dr.shaymaa/information_security/binder1.pdf

http://www.bokus.com/bok/9780130845061/disaster-recovery-planning.pdf

http://book.itep.ru/depository/recovery/EqualLogic_TRResourceGuide_DPR_01.pdf
http://www.pearson.ch/1471/9780130462824/Disaster-Recovery-PlanningPreparing-for.aspx

Related Books
Name of the Book
Disaster recovery planning:
Networks and data communication
Offshore Risk Assessment

Author Name
Regis J.Bud Bates.

Jan Erik vinnem

Recommended For
Disaster recovery planning

Risk assessment

Our mission is To Produce Technically Competent, Socially Committed, and Readily

Employable Computer Engineers by Offering Quality Education and through valueadded courses and Soft skill training.

Information security :
Policy,process and practice
Disaster Recovery Planning: preparing
for the unthinkable.

Detmar W. Straub;
Seymour Goodman;
Richard Baskerville
Jon William Toigo

Risk management
Disaster recovery planning

Web Resources
Topic
No
1
2
3
4
5
6
7
8
9

10

11

Topic Name
Disaster recovery
Risk management
Data Recovery
Planning
Strategies for
centralized system
recovery
Recovery
Data recovery
Strategies
End user recovery
Networking back up

Website Link
http://www.disaster-recovery-guide.com/
http://www.pmhut.com/wp-content/uploads/2008/01/risk_management.pdf
http://www.drj.com/new2dr/w2_002.htm
www.csun.edu/~dn58412/IS655/chapter8.ppt

http://www.pearson.ch/1471/9780130462824/Disaster-Recovery-Planning-Prepar
http://public.dhe.ibm.com/ps/products/db2/info/vr95/pdf/en_US/DB2RecoveryA
db2hae953.pdf
http://i.zdnet.com/whitepapers/RWG_VirusPrevention.pdf
http://www.cs.umsl.edu/~sanjiv/classes/cs5780/projects/F03/howell.pdf
http://nnaac.org/wp-content/uploads/2011/08/Disaster-planning-and-recovery.pdf
Plan maintenance and http://binhthanhdang.files.wordpress.com/2010/08/information-security-fundame
Testing
een.pdf
http://www.cof.org/sites/default/files/documents/files/State-Disaster-Recovery-Pl
Guide_2012.pdf
Improvement for
http://www.colorado.edu/hazards/publications/holistic/ch2_recovery.pdf
http://www.unisdr.org/files/31963_predisasterrecoveryweb.pdf
recovery
management
Emergency Decision
making

12

Controlling the
damage

13

Facility Protection

http://searchdisasterrecovery.techtarget.com/tip/Change-management-in-disasterbusiness-continuity-planni
http://training.fema.gov/EMIWeb/downloads/hdr/Session%208%20PowerPoint.p
http://www.murdoch.edu.au/vco/secretariat/records/disaster_plan.pdf
https://www.google.co.in/?
gws_rd=cr&ei=Controlling+the+damage+in+disaster+recovery+planning.
http://my.safaribooksonline.com/book/technology-management/disasterrecovery/9780470039731/planning-facilities-protection-andrecovery/planning_facilities_protection_and_recov

LESSON PLAN

Topic
No

Topic Name

Book to be referred

No of
Periods

Cumulative
No of
Periods

UNIT- I INTRODUCTION
Our mission is To Produce Technically Competent, Socially Committed, and Readily
Employable Computer Engineers by Offering Quality Education and through valueadded courses and Soft skill training.

Disaster Recovery Introduction

Web.Ref # 1

Facility Protection *

Web.Ref # 13

Data Recovery Planning *

Web.Ref # 3

Strategies for centralized system recovery

Web.Ref # 4

*
Strategies for decentralized system

Web.Ref # 6

recovery *
Tutorial

UNIT II RECOVERY
7

End user recovery

Web.Ref # 7

11

Networking Backup

Web.Ref # 8

12

Emergency Decision making

Web.Ref # 11

13

10

Improvement for recovery management *

Web.Ref # 10

14

11

Plan maintenance and Testing *

Web.Ref # 9

16

12

Controlling the damage

Web.Ref # 12

17

13

Tutorial

18

R1(1-5)

20

UNIT III RISK ANALYSIS

14

Risk Analysis Introduction

15

Effective Risk Analysis

R1(115-124)

21

16

Qualitative Risk Analysis

R1(77-124)

23

17

Value Analysis

R1(27)&R1(74)

24

18

FRAP

R1(129-144)

26

19

Tutorial

27

R1(77-79)

29

UNIT IV QRA
20

Use of QRA

21

Case Study Questionnaires

R1(120-124)

31

22

FRAP forms

R1(205-218)

33

23

BIA forms

R1(280-290)

35

24

Sample Report

R1(299)

36

25

Threat Definition

R1(45-74)

37

26

Tutorial

38

UNIT V ASSESSMENT
27

Risk Assessment and Management

R1(7-27)

40

28

New Threat in Risk Management

R1(44-74)

42

Our mission is To Produce Technically Competent, Socially Committed, and Readily

Employable Computer Engineers by Offering Quality Education and through valueadded courses and Soft skill training.

29

Integrated Risk Management

30

Tutorial

Web.Ref # 2

44

45

PORTIONS FOR MONTHLY TEST I , II and III

Test No
I
II
III

Topic No
1-13
14-26
27-30

ASSIGNMENT TOPICS
Assignment: 1
1. Case study for water wastage management in recovery system.
2. Develop a plan for IT DRP
Assignment: 2
1. Prepare the Case study for Questionnaires.
2. Develop a sample report for FRAP and BIA forms.
Assignment: 3
1. Survey for integrated risk management.
Prepared By,
(CourseCoordiantor-CSE5135)

Verified By,
(HOD/CSE)

Our mission is To Produce Technically Competent, Socially Committed, and Readily

Employable Computer Engineers by Offering Quality Education and through valueadded courses and Soft skill training.