An IS auditor is reviewing the disaster recovery plan (DRP) of an organization with offices across multiple regions. Which of the following should be the auditor's PRIMARY focus?

The correct answer is B. Processes and system dependencies. For organizations with multiple regional offices, the primary audit focus should be on processes and system dependencies. Dependencies determine recovery sequencing, resource prioritization, and interconnectivity between systems across regions. RPO monitoring (A): Important but…

Submitted by salim_om· Apr 18, 2026Information Systems Operations and Business Resilience

Question

Options

ARecovery point objective (RPO) monitoring
BProcesses and system dependencies
CDisaster recovery training
DData backup and storage changes

How the community answered

(47 responses)

A
4% (2)
B
64% (30)
C
21% (10)
D
11% (5)

Explanation

For organizations with multiple regional offices, the primary audit focus should be on processes and system dependencies. Dependencies determine recovery sequencing, resource prioritization, and interconnectivity between systems across regions. RPO monitoring (A): Important but a subset of overall recovery planning. Training (C): Necessary but not the first priority when evaluating plan adequacy. Data backup/storage (D): Technical component but less comprehensive than analyzing

Topics

#Disaster Recovery Plan#IS Audit#System Dependencies#Business Resilience

Community Discussion

No community discussion yet for this question.

Full CISA Practice