Which of the following should be considered FIRST when updating an organization's business continuity plan (BCP) after the acquisition of a new business?

The correct answer is B. Risk associated with the new business. After an acquisition, the first consideration for updating the BCP is assessing the risk associated with the new business (critical processes, dependencies, threats, and impacts). This determines continuity priorities and requirements before budgets or infrastructure plans are…

Submitted by stefanr· Apr 18, 2026Information Security Risk Management

Question

Options

ABusiness strategy
BRisk associated with the new business
CUpdated IT budget
DNew business infrastructure requirements

How the community answered

(41 responses)

A
7% (3)
B
71% (29)
C
5% (2)
D
17% (7)

Explanation

After an acquisition, the first consideration for updating the BCP is assessing the risk associated with the new business (critical processes, dependencies, threats, and impacts). This determines continuity priorities and requirements before budgets or infrastructure plans are addressed.

Topics

#Business Continuity Planning#Risk Management#Mergers & Acquisitions#Organizational Change

Community Discussion

No community discussion yet for this question.

Full CISM Practice