CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1639

Risk Response and Reporting

A program manager has completed an unsuccessful disaster recovery test. Which of the following should the risk practitioner recommend as the NEXT course of action?

  • A Identify what additional controls are needed
  • B Update the business impact analysis (BIA)
  • C Prioritize issues noted during the testing window
  • D Communicate test results to management
Explanation

Deficiencies identified during a failed disaster recovery test should be prioritized according to their impact and urgency. This establishes the order for remediation and supports an effective corrective-action plan.

Community Discussion

No comments yet. Be the first to start the discussion!