An audit was conducted and many critical applications were found to have no disaster recovery plans in place. You conduct a Business Impact Analysis (BIA) to determine impact to the company for each…

Question

Options

• ADetermine the annual loss expectancy (ALE)
• BCreate a crisis management plan
• CCreate technology recovery plans
• DBuild a secondary hot site

• A
  10% (4)
• B
  5% (2)
• C
  82% (32)
• D
  3% (1)

Explanation

After completing a BIA (which identifies which applications are critical and how much downtime they can tolerate), the logical next step is creating technology recovery plans (C) - the BIA's output directly feeds into designing the specific procedures to recover each critical application. Option A (ALE) is a risk quantification metric used before a BIA to prioritize risks financially, not after one. Option B (crisis management plan) addresses human/communications response and is a separate workstream, not the immediate next step following a BIA. Option D (hot site) is a solution you might implement after a recovery plan is written - you can't build infrastructure before knowing what needs to be recovered and how.

Memory tip: Think of it as a pipeline - Risk Assessment → BIA → Recovery Plans → Implementation (hot site, etc.). The BIA tells you what matters; technology recovery plans tell you how to restore it; the hot site is just one tool those plans might call for.

No community discussion yet for this question.