ISACA Exam Questions

Which of the following should be determined FIRST when establishing a business continuity program?

Which of the following should be determined FIRST when establishing a business continuity
program?

A.
Cost to rebuild information processing facilities

B.
Incremental daily cost of the unavailability of systems

C.
Location and cost of offsite recovery facilities

D.
Composition and mission of individual recovery teams

Explanation:

Prior to creating a detailed business continuity plan, it is important to determine the incremental

daily cost of losing different systems. This will allow recovery time objectives to be determined
which, in turn, affects the location and cost of offsite recovery facilities, and the composition and
mission of individual recovery teams. Determining the cost to rebuild information processing
facilities would not be the first thing to determine.