CISM: Certified Information Security ManagerDemo

Question

Which of the following processes should occur NEXT after completing a business impact analysis (BIA)?

A Evaluate the disaster recovery plan (DRP).
B Develop the requirements for the incident response plan.
C Develop a business continuity plan (BCP).
D Identify resources for business recovery.

Explanation

Business-impact analysis results identify recovery priorities and requirements. Those results are used to identify the facilities, personnel, technology, and other resources required for business recovery before the business continuity plan is fully developed. NIST contingency-planning guidance likewise places recovery-strategy development after the BIA and before development of the contingency plan.

Learn more

NIST SP 800-34 Rev. 1: Contingency Planning Guide for Federal Information Systems

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ625

Community Discussion