ExamGecko
Question list
Search
Search

Question 369 - CISM discussion

Report
Export

Which of the following should include contact information for representatives of equipment and software vendors?

A.
Information security program charter
Answers
A.
Information security program charter
B.
Business impact analysis (BIA)
Answers
B.
Business impact analysis (BIA)
C.
Service level agreements (SLAs)
Answers
C.
Service level agreements (SLAs)
D.
Business continuity plan (BCP)
Answers
D.
Business continuity plan (BCP)
Suggested answer: D

Explanation:

The document that should include contact information for representatives of equipment and software vendors is the business continuity plan (BCP) because it provides the guidance and procedures for restoring the organization's critical business functions and operations in the event of a disruption or disaster, and may require contacting external parties such as vendors for assistance or support. Information security program charter is not a good document for this purpose because it does not provide any guidance or procedures for business continuity or disaster recovery. Business impact analysis (BIA) is not a good document for this purpose because it does not provide any guidance or procedures for business continuity or disaster recovery. Service level agreements (SLAs) are not good documents for this purpose because they do not provide any guidance or procedures for business continuity or disaster recovery.

Reference: https://www.isaca.org/resources/isaca-journal/issues/2017/volume-2/business-continuity-management-lifecycle https://www.isaca.org/resources/isaca-journal/issues/2016/volume-4/business-impact-analysis

asked 01/10/2024
LAURA Camacho
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first