nerdexam
Isaca

CISM · Question #81

Which of the following is the PRIMARY reason to regularly update business continuity and disaster recovery documents?

The correct answer is D. To ensure the availability of business operations. The primary reason for regularly updating business continuity and disaster recovery (BCDR) documents is to ensure the continuous availability of critical business operations.

Submitted by rachelw· Apr 18, 2026Information Security Program Development and Management

Question

Which of the following is the PRIMARY reason to regularly update business continuity and disaster recovery documents?

Options

  • ATo ensure audit and compliance requirements are met
  • BTo enforce security policy requirements
  • CTo maintain business asset inventories
  • DTo ensure the availability of business operations

How the community answered

(66 responses)
  • A
    6% (4)
  • B
    2% (1)
  • C
    3% (2)
  • D
    89% (59)

Why each option

The primary reason for regularly updating business continuity and disaster recovery (BCDR) documents is to ensure the continuous availability of critical business operations.

ATo ensure audit and compliance requirements are met

Meeting audit and compliance requirements is a secondary benefit, but the fundamental purpose of BCDR is operational resilience, not merely regulatory adherence.

BTo enforce security policy requirements

While BCDR plans support security policies by defining recovery procedures for security incidents, enforcing security policies is a broader, ongoing security management task, not the primary reason for updating BCDR documents.

CTo maintain business asset inventories

Maintaining business asset inventories is an important input for BCDR plans, but it is a precursor activity, not the primary objective for *updating* the BCDR documents themselves.

DTo ensure the availability of business operationsCorrect

Business continuity and disaster recovery plans are designed to minimize downtime and ensure that critical business functions can resume quickly and effectively after a disruptive event. Regular updates are crucial because organizational structures, technologies, processes, and personnel change, rendering outdated plans ineffective and jeopardizing the ability to maintain business operations during a crisis.

Concept tested: Purpose of BCDR plan updates

Source: https://learn.microsoft.com/en-us/azure/architecture/framework/resiliency/business-continuity-disaster-recovery

Topics

#Business Continuity#Disaster Recovery#BCDR maintenance#Operational Resilience

Community Discussion

No community discussion yet for this question.

Full CISM Practice