nerdexam
Isaca

CISM · Question #504

To ensure alignment between the disaster recovery plan (DRP) and incident response plan, which of the following is MOST important for the information security manager to verify?

The correct answer is D. The plans document the handoff between various teams. Documenting the handoff between teams (D) is the most critical alignment point because the DRP and IRP operate in sequence - the incident response team detects and contains the incident, then hands off to the DR team to restore operations; without a documented handoff, gaps or…

Submitted by certguy· Apr 18, 2026Information Security Incident Management

Question

To ensure alignment between the disaster recovery plan (DRP) and incident response plan, which of the following is MOST important for the information security manager to verify?

Options

  • AThe business impact analysis (BIA) has recently been updated.
  • BThe plans have similar requirements regarding escalations.
  • CThe same organizational department handles related testing.
  • DThe plans document the handoff between various teams.

How the community answered

(37 responses)
  • A
    16% (6)
  • B
    5% (2)
  • C
    8% (3)
  • D
    70% (26)

Explanation

Documenting the handoff between teams (D) is the most critical alignment point because the DRP and IRP operate in sequence - the incident response team detects and contains the incident, then hands off to the DR team to restore operations; without a documented handoff, gaps or duplicated efforts cause failures at exactly the wrong moment.

Why the distractors fall short:

  • (A) An updated BIA informs the DRP, but doesn't directly ensure the two plans are aligned with each other.
  • (B) Similar escalation requirements are useful but secondary - escalation paths can differ between plans without creating a dangerous gap.
  • (C) Having the same department test both plans aids consistency but doesn't guarantee the plans themselves are aligned operationally.

Memory tip: Think of IRP and DRP as a relay race - the handoff is where drops happen. The security manager's job is to make sure that baton exchange is documented, clear, and practiced.

Topics

#DRP-IRP Alignment#Incident Management#Disaster Recovery#Plan Coordination

Community Discussion

No community discussion yet for this question.

Full CISM Practice