Which of the following questions is less likely to help in assessing an organization’s contingency planning
controls?
A.
Is damaged media stored and/or destroyed?
B.
Are the backup storage site and alternate site geographically far enough from the primary site?
C.
Is there an up-to-date copy of the plan stored securely off-site?
D.
Is the location of stored backups identified?
Explanation:
Damaged media is A critical part of contingency planning.
Incorrect Answers:
B: When choosing a backup facility, it should be far enough away from the original site so that one disaster
does not take out both locations.
C: To protect against disasters a copy of the current contingency plan must be stored away from the main site.
D: To protect against disasters at least some of the backups must be stored at another location than the main
site.Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 953