Practice Test GeeksCISM - Certified Information Security Manager Practice Test
← All CISM Flashcard Decks

Business Continuity and Disaster Recovery Flashcards

7 cards from real CISM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Business Continuity and Disaster Recovery flashcards as text

  1. What is the PRIMARY purpose of a Business Continuity Plan (BCP)?

    Answer: To ensure critical business functions can continue during and after a disruption

    A BCP is designed to ensure that critical business functions can continue during and after a disruption, minimizing operational impact.

  2. Which metric defines the maximum amount of data loss an organization can tolerate, measured in time?

    Answer: Recovery Point Objective (RPO)

    Recovery Point Objective (RPO) defines the maximum acceptable amount of data loss measured in time, indicating how far back in time a recovery point must be.

  3. What is the FIRST step in developing a Business Continuity Plan?

    Answer: Conducting a Business Impact Analysis (BIA)

    A Business Impact Analysis (BIA) is conducted first to identify critical business functions and quantify the impact of disruptions before recovery strategies are defined.

  4. A Recovery Time Objective (RTO) of four hours means:

    Answer: The system must be fully functional within four hours of a disaster declaration

    RTO specifies the maximum acceptable time to restore a system or process to operational status after a disruption is declared.

  5. Who holds ULTIMATE responsibility for ensuring that business continuity planning is adequate and funded?

    Answer: Senior management or the board of directors

    Senior management and the board of directors are ultimately accountable for business continuity, as they are responsible for the organization's overall resilience and risk posture.

  6. What distinguishes a hot site from a warm site in disaster recovery?

    Answer: A hot site has fully operational systems with current data, while a warm site has equipment but requires setup time

    A hot site is fully equipped and operational with current data, enabling near-immediate failover, whereas a warm site has hardware but requires configuration and data restoration before use.

  7. A Business Impact Analysis (BIA) primarily helps an organization:

    Answer: Prioritize recovery efforts based on criticality and financial impact

    A BIA prioritizes recovery efforts by quantifying the financial, operational, and reputational impact of disruptions to each business function.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. isaca.org — Renewal, test delivery, eligibility, score validity, fees, exam format, passing score, retake fee, score release, test dates · verified Oct 2026