CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1373

Risk Response and Reporting

Which of the following activities should be completed before creating a disaster recovery plan (DRP)?

  • A Procuring a recovery site
  • B Conducting a business impact analysis (BIA)
  • C Assigning sensitivity levels to data
  • D Identifying the recovery response team
Explanation

A business impact analysis (BIA) determines which business functions are critical, the effects of their disruption, and their recovery priorities and objectives. Those requirements provide the basis for a disaster recovery plan.

Community Discussion

No comments yet. Be the first to start the discussion!