nerdexam
Isaca

CISM · Question #455

Which of the following is the MOST important consideration when defining a recovery strategy in a business continuity plan (BCP)?

The correct answer is C. Organizational tolerance to service interruption. Organizational tolerance to service interruption - expressed as Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) - is the primary driver of any recovery strategy. It determines how quickly systems must be restored and how much data loss is acceptable, which…

Submitted by packet_pusher· Apr 18, 2026Information Security Program Development and Management

Question

Which of the following is the MOST important consideration when defining a recovery strategy in a business continuity plan (BCP)?

Options

  • ALegal requirements
  • BGeographical location of the backup site
  • COrganizational tolerance to service interruption
  • DLikelihood of a disaster

How the community answered

(28 responses)
  • B
    7% (2)
  • C
    89% (25)
  • D
    4% (1)

Explanation

Organizational tolerance to service interruption - expressed as Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) - is the primary driver of any recovery strategy. It determines how quickly systems must be restored and how much data loss is acceptable, which then dictates backup site type, replication frequency, and technology choices. Legal requirements (A), backup site geography (B), and likelihood of disaster (D) are all secondary factors that must align with what the business can actually tolerate.

Topics

#Business Continuity Planning#Recovery Strategy#Organizational Tolerance

Community Discussion

No community discussion yet for this question.

Full CISM Practice