During an audit of a business continuity plan (BCP), an IS auditor found that, although all
departments were housed in the same building, each department had a separate BCP. The IS
auditor recommended that the BCPs be reconciled. Which of the following areas should be
reconciled FIRST?
A.
Evacuation plan
B.
Recovery priorities
C.
Backup storages
D.
Call tree
Explanation:
Protecting human resources during a disaster-related event should be addressed first. Having
separate BCPs could result in conflicting evacuation plans, thus jeopardizing the safety of staff
and clients. Choices B, C and D may be unique to each department and could be addressed
separately, but still should be reviewed for possible conflicts and/or the possibility of cost
reduction, but only after the issue of human safety has been analyzed.