Management considered two projections for its business continuity plan; plan A with two months to recover and
plan B with eight months to recover. The recovery objectives are the same in both plans. It is reasonable to
expect that plan B projected higher:

During an audit of a business continuity plan (BCP), an IS auditor found that, although all departments were
housed in the same building, each department had a separate BCP. The IS auditor recommended that the
BCPs be reconciled. Which of the following areas should be reconciled FIRST?

When developing a business continuity plan (BCP), which of the following tools should be used to gain an
understanding of the organization’s business processes?

An IS auditor noted that an organization had adequate business continuity plans (BCPs) for each individual
process, but no comprehensive BCP. Which would be the BEST course of action for the IS auditor?

During a business continuity audit an IS auditor found that the business continuity plan (BCP) covered only
critical processes. The IS auditor should:

Depending on the complexity of an organization’s business continuity plan (BCP), the plan may be developed
as a set of more than one plan to address various aspects of business continuity and disaster recovery, in such
an environment, it is essential that:

While designing the business continuity plan (BCP) for an airline reservation system, the MOST appropriate
method of data transfer/backup at an offsite location would be:

After a full operational contingency test, an IS auditor performs a review of the recovery steps. The auditor
concludes that the time it took for the technological environment and systems to return to full-functioning
exceeded the required critical recovery time. Which of the following should the auditor recommend?

The PRIMARY objective of business continuity and disaster recovery plans should be to:

Which of the following would an IS auditor consider to be the MOST important to review when conducting a
business continuity audit?