InfoSec ExamPrep™
Sign InStart Free
← Daily Questions

CISSP · Security and Risk Management

A business continuity team is chartered to build a new BCP program from scratch. Which activity should occur FIRST?

  1. AConduct a Business Impact Analysis (BIA) to identify critical processes and recovery time objectives
  2. BDraft the crisis communication plan so executives and regulators can be notified the moment a disruption occurs
  3. CSelect and contract an alternate processing site so a recovery location exists before planning proceeds
  4. DAdd redundant power and network capacity at the primary facility to reduce the chance of disruption occurring
Show the answer

Answer: A) Conduct a Business Impact Analysis (BIA) to identify critical processes and recovery time objectives

The BIA identifies critical business functions, their maximum tolerable downtime, and recovery priorities: it must precede strategy selection (sites, technology) since those decisions depend on BIA output.

Sources

  1. [1]
  2. [2]
Practice the whole CISSP exam

Over 1,000 original CISSP questions like this one, each with its explanation and official source. Your first 24 hours are full access, free, no card required.

Start Free
Your cookie choices
We use essential cookies to run this site, and, only with your consent, advertising cookies from Google, LinkedIn, and Reddit to measure ad performance. See our for details.