During the systems support and security phase, IT staff maintain, improve, and protect the system1. Security controls protect the information system from external and internal threats. A well-built system should be secure, scalable, reliable and maintainable. Systems Support and Security provides vital protection and service maintenance for software, hardware, and enterprise IT systems, enterprise IT infrastructure, networks, and processing systems. transactions. The System Support and Security group enforces and monitors physical and electronic security software, procedures, and hardware. Managing system support and security includes three primary concerns: user expectations, system performance, and security requirements1. Procedural security, commonly referred to as operational security, consists of policies and management controls that ensure secure operations. Procedural security represents how certain tasks should be performed, such as large-scale data backups performed daily on stored emails. Procedural security also involves securing certain procedures that can be valuable to attackers. Procedural security must be supported by senior management and fully explained to all staff1. The organization should definitely provide training to explain these procedures and provide reminders from time to time, which will ensure that safety is a priority. Every system must be ready to support data backup and recovery. Backup involves copying data at scheduled intervals or continuously. Recovery refers to restoring data and restarting a system after it has been interrupted. A comprehensive backup and recovery plan that prepares for potential disasters is mentioned......in the middle of the document......ns. Cloud-based solutions are considered a more viable solution when dealing with smaller organizations with limited IT budgets. Cloud-based recovery solutions enable the organization to develop confidence in its disaster recovery plans by eliminating risks and achieving better predictability. By doing so, the organization can administer simple and frequent tests without impacting business services. Finally, every organization must ensure that the disaster recovery plan will work effectively. IT staff should test the DR regularly and resolve any issues that arise. Additionally, staff should be properly trained on their role(s) in implementing the disaster recovery plan in the event of a disaster. Works Cited Stavridis, Steven. “A Guide to Disaster Recovery Planning.” CIO. Np, February 10, 2013. Web. April 18. 2014.