After a full operational contingency test, an IS auditor performs a review of the recovery steps. The
auditor concludes that the time it took for the technological environment and systems to return to
full-functioning exceeded the required critical recovery time. Which of the following should the
auditor recommend?

While designing the business continuity plan (BCP) for an airline reservation system, the MOST
appropriate method of data transfer/backup at an offsite location would be:

Depending on the complexity of an organization’s business continuity plan (BCP), the plan may be
developed as a set of more than one plan to address various aspects of business continuity and
disaster recovery, in such an environment, it is essential that:

During a business continuity audit an IS auditor found that the business continuity plan (BCP)
covered only critical processes. The IS auditor should:

An IS auditor noted that an organization had adequate business continuity plans (BCPs) for each
individual process, but no comprehensive BCP. Which would be the BEST course of action for the IS
auditor?

When developing a business continuity plan (BCP), which of the following tools should be used to
gain an understanding of the organization’s business processes?

During an audit of a business continuity plan (BCP), an IS auditor found that, although all
departments were housed in the same building, each department had a separate BCP. The IS auditor
recommended that the BCPs be reconciled. Which of the following areas should be reconciled FIRST?

Management considered two projections for its business continuity plan; plan A with two months to
recover and plan B with eight months to recover. The recovery objectives are the same in both
plans. It is reasonable to expect that plan B projected higher:

The optimum business continuity strategy for an entity is determined by the:

The PRIMARY objective of testing a business continuity plan is to: