An IS auditor noted that an organization had adequate business continuity plans (BCPs) for each individual
process, but no comprehensive BCP. Which would be the BEST course of action for the IS auditor?

During a business continuity audit an IS auditor found that the business continuity plan (BCP) covered only
critical processes. The IS auditor should:

Depending on the complexity of an organization’s business continuity plan (BCP), the plan may be developed
as a set of more than one plan to address various aspects of business continuity and disaster recovery, in such
an environment, it is essential that:

While designing the business continuity plan (BCP) for an airline reservation system, the MOST appropriate
method of data transfer/backup at an offsite location would be:

After a full operational contingency test, an IS auditor performs a review of the recovery steps. The auditor
concludes that the time it took for the technological environment and systems to return to full-functioning
exceeded the required critical recovery time. Which of the following should the auditor recommend?

The PRIMARY objective of business continuity and disaster recovery plans should be to:

Which of the following would an IS auditor consider to be the MOST important to review when conducting a
business continuity audit?

To develop a successful business continuity plan, end user involvement is critical during which of the following
phases?

Which of the following would contribute MOST to an effective business continuity plan (BCP)?

Which of the following activities should the business continuity manager perform FIRST after the replacement
of hardware at the primary information processing facility?