ISACA Exam Questions

which of the following?

The business continuity policy should contain which of the following?

A.
Emergency call trees

B.
Recovery criteria

C.
Business impact assessment (BIA)

D.
Critical backups inventory

Explanation:

Recovery criteria, indicating the circumstances under which specific actions are undertaken,
should be contained within a business continuity policy. Telephone trees, business impact
assessments (BIAs) and listings of critical backup files are too detailed to include in a policy
document.