CISSP · Question #3
Recovery strategies of a Disaster Recovery planning (DRIP) MUST be aligned with which of the following?
The correct answer is D. Cost/benefit analysis and business objectives. Disaster Recovery Planning (DRIP) recovery strategies must be aligned with cost/benefit analysis and business objectives to ensure that the recovery approach is both financially justifiable and supports the organization's overall mission and priorities.
Question
Recovery strategies of a Disaster Recovery planning (DRIP) MUST be aligned with which of the following?
Options
- AHardware and software compatibility issues
- BApplications' critically and downtime tolerance
- CBudget constraints and requirements
- DCost/benefit analysis and business objectives
How the community answered
(42 responses)- A2% (1)
- B5% (2)
- C10% (4)
- D83% (35)
Why each option
Disaster Recovery Planning (DRIP) recovery strategies must be aligned with cost/benefit analysis and business objectives to ensure that the recovery approach is both financially justifiable and supports the organization's overall mission and priorities.
Hardware and software compatibility is a technical implementation consideration that comes after strategy selection, not the primary driver that recovery strategies must be aligned with.
While application criticality and downtime tolerance (RTO/RPO) are important inputs into DR planning, they are metrics derived from business objectives rather than the overarching framework that strategies must be aligned with.
Budget constraints are a subset of the broader cost/benefit analysis and business objectives framework; focusing solely on budget ignores the business justification and strategic alignment required for a complete DR strategy.
Recovery strategies in a DRIP must be aligned with cost/benefit analysis and business objectives because DR planning is fundamentally a business decision - the cost of implementing recovery solutions must be weighed against the potential losses from downtime, and every strategy must ultimately support the organization's core goals and acceptable risk tolerance. Without this alignment, organizations may over-invest in recovery capabilities that exceed business needs, or under-invest in areas critical to survival. Business objectives define the acceptable Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) that drive all strategic decisions.
Concept tested: Disaster Recovery Planning strategy alignment with business objectives
Source: https://www.nist.gov/publications/contingency-planning-guide-federal-information-systems
Topics
Community Discussion
No community discussion yet for this question.