CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ341

Risk Optimization

When choosing a vendor to deliver services related to a critical application, which of the following is the MOST important business continuity planning (BCP) consideration?

  • A Testing the vendor's BCP and analyzing the results
  • B Obtaining independent audit reports of the vendor's BCP
  • C Evaluating whether the vendor's BCP aligns with the enterprise's BCP
  • D Procuring a copy of the vendor's BCP during the contracting process
Explanation

A vendor supporting a critical application must have business-continuity capabilities that align with the enterprise’s recovery objectives, continuity requirements, and dependency plans. Evidence such as tests, audit reports, and a copy of the plan is valuable, but alignment with the enterprise BCP is the primary requirement.

Community Discussion

No comments yet. Be the first to start the discussion!