CISA · Question #497
Which of the following is MOST important for an IS auditor to verify when reviewing an organization's business continuity plan (BCP)?
The correct answer is D. Recovery time and recovery point objectives are defined.. The most important aspect for an IS auditor to verify in a business continuity plan is that recovery time objectives (RTOs) and recovery point objectives (RPOs) are clearly defined. These parameters determine how quickly systems must be restored and how much data loss is acceptab
Question
Which of the following is MOST important for an IS auditor to verify when reviewing an organization's business continuity plan (BCP)?
Options
- AThe BCP contains the list of recovery team members.
- BThe BCP is updated using an automated tool.
- CThe BCP reflects critical business processes.
- DRecovery time and recovery point objectives are defined.
How the community answered
(37 responses)- A8% (3)
- B5% (2)
- C22% (8)
- D65% (24)
Explanation
The most important aspect for an IS auditor to verify in a business continuity plan is that recovery time objectives (RTOs) and recovery point objectives (RPOs) are clearly defined. These parameters determine how quickly systems must be restored and how much data loss is acceptable, ensuring alignment between business continuity capabilities and organizational
Topics
Community Discussion
No community discussion yet for this question.