During an audit of a business continuity plan (BCP), an IS auditor found that, although all departments were
housed in the same building, each department had a separate BCP. The IS auditor recommended that the
BCPs be reconciled. Which of the following areas should be reconciled FIRST?
A.
Evacuation plan
B.
Recovery priorities
C.
Backup storages
D.
Call tree
Explanation:
Protecting human resources during a disaster-related event should be addressed first. Having separate BCPs
could result in conflicting evacuation plans, thus jeopardizing the safety of staff and clients. Choices B, C and D
may be unique to each department and could be addressed separately, but still should be reviewed for possible
conflicts and/or the possibility of cost reduction, but only after the issue of human safety has been analyzed.