During an audit of a business continuity plan (BCP), an IS auditor found that, although all
departments were housed in the same building, each department had a separate BCP. The IS
auditor recommended that the BCPs be reconciled. Which of the following areas should be
reconciled FIRST?

When developing a business continuity plan (BCP), which of the following tools should be used to
gain an understanding of the organization’s business processes?

An IS auditor noted that an organization had adequate business continuity plans (BCPs) for each
individual process, but no comprehensive BCP. Which would be the BEST course of action for the
IS auditor?

During a business continuity audit an IS auditor found that the business continuity plan (BCP)
covered only critical processes. The IS auditor should:

Depending on the complexity of an organization’s business continuity plan (BCP), the plan may be
developed as a set of more than one plan to address various aspects of business continuity and
disaster recovery, in such an environment, it is essential that:

Which of the following is a continuity plan test that uses actual resources to simulate a system
crash to cost-effectively obtain evidence about the plan’s effectiveness?

While designing the business continuity plan (BCP) for an airline reservation system, the MOST
appropriate method of data transfer/backup at an offsite location would be:

After a full operational contingency test, an IS auditor performs a review of the recovery steps. The
auditor concludes that the time it took for the technological environment and systems to return to
full-functioning exceeded the required critical recovery time. Which of the following should the
auditor recommend?

The PRIMARY objective of business continuity and disaster recovery plans should be to:

Which of the following would an IS auditor consider to be the MOST important to review when
conducting a business continuity audit?