CISSP-ISSMP: Information Systems Security Management Professional

By ISC · Question Mode

QuestionQ116

VerifiedContingency Management

Della is a security manager at SoftTech Inc. and is training newly recruited personnel in security management. During a tutorial on DRP, she explains that a disaster recovery plan’s main goal is to provide an organized method for making decisions when a disruptive event occurs, and asks for the DRP’s other objectives.

If you are one of SoftTech Inc.’s newly recruited personnel, how would you answer her question? Each correct answer represents part of the solution.

Choose three
Explanation

A disaster recovery plan is intended to recover critical information-system services after a major failure or disaster, limit the business risk created by prolonged service interruption, and establish recovery procedures that are tested and exercised. Testing and simulation validate that standby capabilities can support recovery. The plan should reduce—not maximize—the ad hoc decision-making required of personnel during a disaster.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!