CISA Business Continuity Planning 4

Question 1

Which of the following is the PRIMARY responsibility of executive management regarding business continuity planning?

Accepted Answer

Sponsoring and approving the BCP program and providing adequate resources

Answer

Executive management's primary BCP role is governance: providing leadership commitment, funding, and policy approval for the overall program.

Question 2

An organization is selecting between cloud-based disaster recovery and a traditional hot site. A key ADVANTAGE of cloud-based DR is:

Accepted Answer

Scalable resources and reduced capital expenditure

Answer

Cloud-based DR offers on-demand scalable resources and shifts capital expenditure to operational expenditure, reducing upfront infrastructure costs.

Question 3

A company stores backup media at a facility 2 miles from the primary data center. An IS auditor's MAIN concern would be:

Accepted Answer

The proximity may mean both sites are affected by the same regional disaster

Answer

Offsite storage must be far enough away to avoid being impacted by the same disaster (flood, hurricane, earthquake) that affects the primary site.

Question 4

Which of the following components is MOST important to include in the emergency response phase of a BCP?

Accepted Answer

Employee evacuation and immediate safety procedures

Answer

The emergency response phase prioritizes human safety and immediate crisis containment before addressing IT recovery or financial concerns.

Question 5

An IS auditor finds that a company's BCP does not address pandemics or widespread illness. Based on BCP best practices, this is:

Accepted Answer

A gap, since BCPs should address all threats identified in the risk assessment including people-centric disasters

Answer

BCPs must address a range of disruption scenarios including pandemics, which primarily affect personnel availability rather than physical infrastructure.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA Business Continuity Planning 4