An organization is subject to a new regulation that requires nearly real-time recovery of its services following a disruption. Which of the following is the BEST way to manage the risk in this…

Moving redundant infrastructure closer might reduce latency and aid recovery, but it is a specific tactic that would be determined after reviewing and updating the overall BCP to define the new RTO/RPO.

Obtaining insurance and funds is a financial risk transfer/acceptance strategy, not a way to achieve nearly real-time technical recovery of services.

A new regulation demanding nearly real-time recovery directly impacts the organization's Recovery Time Objective (RTO) and potentially its Recovery Point Objective (RPO). The BCP defines the strategies, procedures, and resources for achieving these objectives, so it must be reviewed and revised to ensure the organization's plans and capabilities can meet the new, more stringent recovery requirements.

Outsourcing disaster recovery might be a component of the new BCP, but the best way to manage the risk is to first understand the full scope of the new requirements and plan accordingly within the BCP, rather than immediately jump to outsourcing as the primary solution.