CISM: Certified Information Security ManagerDemo

Question

When developing an incident response plan, the triggers for the business continuity plan (BCP) MUST be based on:

A a threat assessment.
B recovery time objectives (RTOs).
C a business impact analysis (BIA).
D a risk assessment.

Explanation

A business impact analysis (BIA) identifies critical business processes, disruption impacts, dependencies, and recovery priorities. These findings provide the basis for defining when business continuity procedures must be activated.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ773

Community Discussion