312-76V3: EC-Council Disaster Recovery Professional (EDRP)

To comply with a particular information security risk-management standard, George performed an exercise to identify every risk his organization faced. He determined that the organization was vulnerable to these risks:

• Phishing emails sent to the organization’s employees
• Earthquakes, which were common in the city where his office was located
• Destruction of the organization’s critical data if the primary server crashed
• Electrical surges that could, over time, damage the primary server

The standard required him to prioritize these risks before developing a plan to address them and to identify the highest-priority risk. George considered electrical surges to be the highest-priority risk. Which standard is George seeking to comply with?