During testing, a risk practitioner finds the IT department's recovery time objective (RTO) for a key system does not align with the enterprise's business continuity plan (BCP). Which of the following should be done NEXT?

Question

Piotr Jakubowski · Accepted Answer

Report the gap to senior management

Piotr Jakubowski · Answer

Consult with the IT department to update the RTO

Piotr Jakubowski · Answer

Complete a risk exception form.

Piotr Jakubowski · Answer

Consult with the business owner to update the BCP

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 158 - CRISC discussion

Suggested answer: A

0 comments