QuestionQ57

Information Systems Operations and Business Resilience

An IS auditor reviews an organization's business continuity plan (BCP) after a change in organizational structure that significantly affects business processes. Which finding should be of GREATEST concern to the auditor?

Explanation

A business impact analysis establishes the criticality, recovery priorities, dependencies, and impact of disrupted business processes on which a business continuity plan is based. A BIA completed two years before a significant organizational restructuring may no longer reflect the current processes and recovery requirements, so the BCP may be fundamentally misaligned with the organization’s actual continuity needs.

Community Discussion

No comments yet. Be the first to start the discussion!