CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ80

VerifiedInformation Security Risk Management

When conducting a business impact analysis (BIA), who is responsible for setting the initial recovery time objective (RTO)?

Explanation

The information owner establishes the business impact tolerance and recovery priority for the information or process. That owner therefore determines the initial RTO, while business continuity and security personnel typically coordinate, advise, and implement the recovery planning process.

Community Discussion

No comments yet. Be the first to start the discussion!