CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ373

Risk Response and Reporting

Which of the following is MOST important for a risk practitioner to verify when reviewing the disaster recovery plan (DRP)?

  • A The DRP covers relevant scenarios.
  • B The business continuity plan (BCP) has been documented.
  • C Senior management has approved the DRP.
  • D The DRP has been tested by an independent third party.
Explanation

A disaster recovery plan is effective only when its recovery strategies and procedures address the organization’s relevant disaster and risk scenarios. Governance approval, BCP documentation, and testing may support the program, but neither approval nor third-party testing alone demonstrates that the DRP covers the disruptions it must mitigate.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!