The Information Security Officer (ISO) is reviewing a summary of the findings from the last COOP tabletop
exercise. The Chief Information Officer (CIO) wants to determine which additional controls must be
implemented to reduce the risk of an extended customer service outage due to the VoIP system being
unavailable. Which of the following BEST describes the scenario presented and the document the ISO is
reviewing?

A.
The ISO is evaluating the business implications of a recent telephone system failure within the BIA.

B.
The ISO is investigating the impact of a possible downtime of the messaging system within the RA.

C.
The ISO is calculating the budget adjustment needed to ensure audio/video system redundancy within the
RFQ.

D.
The ISO is assessing the effect of a simulated downtime involving the telecommunication system within the
AAR.