ExamGecko
Search Search Login
Home Home / Isaca / CISM
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following BEST facilitates the effective execution of an incident response plan?
Which of the following BEST enables an incident response team to determine appropriate actions during an initial investigation?
What should a global information security manager do FIRST when informed that a new regulation with significant impact will go into effect soon?
Which of the following BEST demonstrates that an anti-phishing campaign is effective?
Which of the following is the BEST approach to incident response for an organization migrating to a cloud-based solution?
When remote access to confidential information is granted to a vendor for analytic purposes, which of the following is the MOST important security consideration?
What should an information security manager verify FIRST when reviewing an information asset management program?
Which of the following should an information security manager do FIRST upon learning that a competitor has experienced a ransomware attack?
Several months after the installation of a new firewall with intrusion prevention features to block malicious activity, a breach was discovered that came in through the firewall shortly after installation. This breach could have been detected earlier by implementing firewall:
Which of the following roles is BEST suited to validate user access requirements during an annual user access review?

Question 526 - CISM discussion

Report
Export

Which of the following should be the GREATEST concern for an information security manager when an annual audit reveals the organization's business continuity plan (BCP) has not been reviewed or updated in more than a year?

A.
An outdated BCP may result in less efficient recovery if an actual incident occurs.
Answers
A.
An outdated BCP may result in less efficient recovery if an actual incident occurs.
B.
The organization may suffer reputational damage for not following industry best practices.
Answers
B.
The organization may suffer reputational damage for not following industry best practices.
C.
The audit finding may impact the overall risk rating of the organization.
Answers
C.
The audit finding may impact the overall risk rating of the organization.
D.
The lack of updates to the BCP may result in noncompliance with internal policies.
Answers
D.
The lack of updates to the BCP may result in noncompliance with internal policies.
Suggested answer: A

Explanation:

A BCP is a document that outlines the processes and procedures to maintain or resume critical business functions and minimize the impact of a disruption on the organization's objectives, customers, and stakeholders. A BCP should be reviewed and updated regularly to reflect the changes in the organization's environment, risks, resources, and requirements. An outdated BCP may result in less efficient recovery if an actual incident occurs, as it may not account for the current situation, dependencies, priorities, or recovery strategies. This may lead to increased downtime, losses, or damages for the organization.

Reference= CISM Review Manual 2022, page 3101; CISM Exam Content Outline, Domain 4, Knowledge Statement 4.82; CISM 2020: Business Continuity3; Part Two: Business Continuity and Disaster Recovery Plans

Show Answer
asked 01/10/2024
Christopher Scott
41 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms