nerdexam
(ISC)2

CISSP · Question #309

Determining outage costs caused by a disaster can BEST be measured by the

The correct answer is C. overall long-term impact of the outage.. Measuring outage costs in disaster recovery planning requires a comprehensive view that captures all financial, operational, and reputational impacts over time, not just immediate or narrow metrics.

Submitted by lukas.cz· Mar 5, 2026Security and Risk Management

Question

Determining outage costs caused by a disaster can BEST be measured by the

Options

  • Acost of redundant systems and backups.
  • Bcost to recover from an outage.
  • Coverall long-term impact of the outage.
  • Drevenue lost during the outage.

How the community answered

(22 responses)
  • A
    9% (2)
  • B
    5% (1)
  • C
    73% (16)
  • D
    14% (3)

Why each option

Measuring outage costs in disaster recovery planning requires a comprehensive view that captures all financial, operational, and reputational impacts over time, not just immediate or narrow metrics.

Acost of redundant systems and backups.

The cost of redundant systems and backups measures preventive investment, not the actual cost of an outage itself, making it a planning metric rather than an outage cost measurement.

Bcost to recover from an outage.

The cost to recover from an outage captures only one component of outage impact (remediation expenses) and ignores losses incurred during and after the outage period.

Coverall long-term impact of the outage.Correct

The overall long-term impact of an outage is the most comprehensive measure because it encompasses not only immediate revenue loss but also reputational damage, customer churn, regulatory penalties, productivity loss, and recovery costs. Business Impact Analysis (BIA) in disaster recovery frameworks evaluates outages holistically across time to determine true cost to the organization. This long-term, multi-dimensional view provides the most accurate and complete measurement of outage costs.

Drevenue lost during the outage.

Revenue lost during the outage is only a partial financial metric and excludes indirect costs such as reputational harm, customer loss, legal liability, and long-term business disruption.

Concept tested: Business Impact Analysis and comprehensive outage cost measurement

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#outage costs#business impact analysis#disaster recovery#risk assessment

Community Discussion

No community discussion yet for this question.

Full CISSP Practice